Does OP-TEE support discrete TPM hardware ?

[JesseY66]

Hi ,
I know that OP-TEE supports fTPM, but does it also support real discrete TPM hardware? Thank you.

[etienne-lms]

Hello @JesseY66,
There may be a misunderstanding when we say that OP-TEE currently supports fTPM. OP-TEE currently supports hosting a fTPM trusted application to offer TPM services to the non-secure world (e.g. U-Boot and the Linux kernel). However OP-TEE does not offer services to use the fTPM (or a discrete TPM) as a secure storage area, to perform image measurements (e.g. measuring loaded TAs) or leverage other TPM features. In this scope, current OP-TEE does not support discrete hardware TPM.

There has been an attempt to implement a TPM driver in OP-TEE (P-R #5194) but since not used it has been removed since (#5994). Contributions to add TPM interface support in OP-TEE are welcome of course.