blob: 201dfc61ac3c193c81cddeccc1f7a074f0500ea9 [file] [log] [blame]
option optimize_for = LITE_RUNTIME;
package tpm_manager;
// The messages in this file correspond to the TpmManager D-Bus interface.
enum TpmManagerStatus {
STATUS_SUCCESS = 0;
STATUS_NOT_AVAILABLE = 1;
}
// Input for the GetTpmStatus method
message GetTpmStatusRequest {
}
// Output from the GetTpmStatus method
message GetTpmStatusReply {
optional TpmManagerStatus status = 1;
// Whether a TPM is enabled on the system.
optional bool enabled = 2;
// Whether the TPM has been owned.
optional bool owned = 3;
// Whether the TPM initialization flow has completed. This includes taking
// ownership, preparing attestation data, and finalizing lockbox NVRAM.
optional bool initialized = 4;
// The TPM owner password. This is only available when (owned &&
// !initialized) and sometimes not even then.
optional string owner_password = 5;
// Whether attestation data has been prepared. This includes reading the
// endorsement certificate out of NVRAM and generating an identity key. This
// does not include any kind of enrollment with a Privacy CA.
optional bool attestation_prepared = 6;
// Whether the device has enrolled with a Privacy CA. This means the identity
// key has been successfully certified.
optional bool attestation_enrolled = 7;
// The current dictionary attack counter value.
optional int32 dictionary_attack_counter = 8;
// The current dictionary attack counter threshold.
optional int32 dictionary_attack_threshold = 9;
// Whether the TPM is in some form of dictionary attack lockout.
optional bool dictionary_attack_lockout_in_effect = 10;
// The number of seconds remaining in the lockout.
optional int32 dictionary_attack_lockout_seconds_remaining = 11;
// Whether the install lockbox has been finalized.
optional bool install_lockbox_finalized = 12;
// Whether the boot lockbox has been finalized.
optional bool boot_lockbox_finalized = 13;
// Whether the current PCR values show a verified boot.
optional bool verified_boot_measured = 14;
}