TPM Revoke Attestation Test
This test runs the TPM Revoke Attestation Test using a test boot driver. This test validates that the TPM driver stack is properly initialized early in the boot process to be usable by early boot components like the Early Launch Anti Malware driver. The test boot driver calls the following function through TBS.sys and validates its results:
TBS_RESULT WINAPI Tbsi_Revoke_Attestation()
This function extends PCR[12] by an unspecified value and increments the boot counter in the TPM to simulate a real world scenario of attestation revocation. The test validates that the PCR 12 and the boot counter values are changed by the Tbsi_Revoke_Attestation API call.
Test details
|
Associated requirements |
System.Fundamentals.TPM20.TPM20 |
|
Platforms |
Windows RT (ARM-based)
|
|
Expected run time |
~30 minutes |
|
Categories |
Certification |
|
Type |
Manual |
Running the test
Before you run the test, review the prerequisites in TPM System Fundamentals Testing Prerequisites.
This test requires secure boot debug policy to be installed on Windows RT devices and secure boot to be turned off on non-Windows RT devices.
This test has no additional test parameters.
Troubleshooting
For troubleshooting information, see Troubleshooting the Windows HCK Environment.
This test returns Pass or Fail. To review test details, review the test log from Windows Hardware Certification Kit (Windows HCK)Studio.
To provide more information for troubleshooting failures in this test, you can enable tracing of the TPM. Refer to the steps provided in the TCG TPM Integration Test (Manual).
See Also