# Raspberry / U-Boot / TPM 2.0

**URL:** <https://hub.mender.io/t/raspberry-u-boot-tpm-2-0/2948>\
**Category:** General Discussions\
**Created:** [December 7, 2020, 6:44pm UTC](https://hub.mender.io/t/raspberry-u-boot-tpm-2-0/2948 "2020-12-07T18:44:34Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Fabrice](https://avatars.discourse-cdn.com/v4/letter/f/5fc32e/32.png) [@Fabrice](https://hub.mender.io/u/Fabrice)\
**Post date:** [December 7, 2020, 6:44pm UTC](https://hub.mender.io/t/raspberry-u-boot-tpm-2-0/2948/1 "2020-12-07T18:44:34Z")

</div>

Hi all,

I’m working with Yocto “Dunfell” and Mender on Raspberry Pi 3B+ and 4 in 64 bits.

Everything works fine and I would like to take into account the onboarded TPM (Infineon SLB9670).

I saw in the project [uboot-mender](https://github.com/mendersoftware/uboot-mender) that they were some flags to activate the TPM management.

As I haven’t found any information on how integrating this thru a recipe, so I decided to ask the community.

Many thanks in advance for your previous help,

Best regards,

Fabrice

---

<div class="post-metadata">

**Author:** ![drewmoseley](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/drewmoseley/32/47_2.png) [@drewmoseley](https://hub.mender.io/u/drewmoseley)\
**Post date:** [December 7, 2020, 8:00pm UTC](https://hub.mender.io/t/raspberry-u-boot-tpm-2-0/2948/2 "2020-12-07T20:00:18Z")

</div>

Hi @Fabrice this has not yet been fully implemented. I did some work a while ago with UEFI SecureBoot on X86 but never completed it.

The git repo you linked to is our fork of UBoot with just a few local patches so it will have whatever TPM support upstream UBoot has but we have not done anything more with it than that.

Drew

---

<div class="post-metadata">

**Author:** ![mirzak](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/mirzak/32/2056_2.png) [@mirzak](https://hub.mender.io/u/mirzak)\
**Post date:** [December 8, 2020, 7:16am UTC](https://hub.mender.io/t/raspberry-u-boot-tpm-2-0/2948/3 "2020-12-08T07:16:30Z")

</div>

What do you intend to use the TPM for?

In regards to Yocto, there are some bits and pieces for TPM support in this layer:

> **[jiazhang0/meta-secure-core](https://github.com/jiazhang0/meta-secure-core)**
>
> OpenEmbedded layer for the use cases on secure boot, integrity and encryption - jiazhang0/meta-secure-core

---

<div class="post-metadata">

**Author:** ![Fabrice](https://avatars.discourse-cdn.com/v4/letter/f/5fc32e/32.png) [@Fabrice](https://hub.mender.io/u/Fabrice)\
**Post date:** [December 8, 2020, 10:35am UTC](https://hub.mender.io/t/raspberry-u-boot-tpm-2-0/2948/4 "2020-12-08T10:35:25Z")

</div>

Hi all,

Many thanks for your feedbacks. My problem is that, for Raspberry, the file tpm-sl9670.dtbo must be present in /boot/overlays (I guess in /uboot/overlays) and the file config.txt must have the following additional lines:  
dtparam=spi=on  
dtoverlay=tpm-slb9670

I managed to update the this file. But even after copying the .dtbo file at the correct location, the TPM is not detected (it should appear as /dev/tpm0 and /dev/tpmrm0.

I will follow Mirzak’s advice and have a look at [meta-secure-core](https://github.com/jiazhang0/meta-secure-core).

I will let you know if it solves the problem.

Once again many thanks for this important clue,

Have a nice day,

Fabrice