Bug ID 1209735
Summary GNOME device security checks failed on a supposedly passed device.
Classification openSUSE
Product openSUSE Tumbleweed
Version Current
Hardware 64bit
OS openSUSE Tumbleweed
Status NEW
Severity Normal
Priority P5 - None
Component GNOME
Assignee gnome-bugs@suse.de
Reporter 95kreaninw95@gmail.com
QA Contact qa-bugs@suse.de
Found By ---
Blocker ---

Created attachment 865837 [details]
My failed device security report.

My device security report shows the system's security level at level 0 - HSI:0!
(v1.8.12), as shown in the attached device security report file.

I check the level 1 test, 2 tests are showing as "Fail".

- Intel ME (Intel Management Engine) version is showing as "Fail (Not Valid)"
even though my CPU, Intel i5-8250U, supports Intel ME. See:
https://ark.intel.com/content/www/us/en/ark/products/124967/intel-core-i58250u-processor-6m-cache-up-to-3-40-ghz.html#:~:text=Yes%20with-,Intel%C2%AE%20ME,-Intel%C2%AE%20OS%20Guard

- TPM v2.0 is showing as "Fail (Not Found)". As stated by Intel, my CPU should
support TPM v2.0. See:
https://www.intel.com/content/www/us/en/business/enterprise-computers/resources/trusted-platform-module.html#:~:text=If%20your%20computer%20is%20based%20on%20the%208th%20Generation%20or%20later%20Intel%C2%AE%20Core%E2%84%A2%20Processor%20family%2C%C2%A0you%20can%20rest%20assured%20knowing%20your%20system%20has%20Intel%C2%AE%20Platform%20Trust%20Technology%20(Intel%C2%AE%20PTT)%2C%C2%A0an%20integrated%20TPM%20that%20adheres%20to%20the%202.0%20specifications.

My laptop should be at least passed the level 1 test, but it failed instead.

Note my Linux kernel verification shows as "Fail (Tainted)" because I enable
HuC firmware loading with "options i915 enable_guc=2" in
"/etc/modprobe.d/i915.conf" file. However, this shouldn't affect my security
level 1 test.


You are receiving this mail because: