GUI: TPM - Enable / Disable

[derick-montague]

Stakeholders

SME: Chris Engle, Nick Bofferding
Design Researcher: @nicoleconser
UX Designer: @jandraa
FED:

Use Case

As a user I need a way to enable the 'TPM required policy' so that my system does not run if the TPM is faulty. I need a way to disable the policy so that my system does run regardless of if the TPM is functional or not.

Our proposal is to place this functionality in the Server Power Operations panel given that the required policy will really only matter and take effect during reboot/power on. Additionally, this is where users would be configuring 'how' the boot occurs.

InVision Prototype

https://ibm.invisionapp.com/share/8ENYRVXAPFD#/319150964_3-7-1A_Boot_Options_Empty (Navigate by clicking on any flashing blue rectangles or using the keyboard arrows).

Since the interaction is a simple on/off, we added the component in the 'on' state to the boot options flow. To navigate the prototype, click on flashing blue rectangles or use the right and left keyboard arrows.

Design Issue (phosphor-webui)

openbmc/phosphor-webui#90

Development Issue

---

References/Resources

---

[jandraa]

This story refers to the TPM policy, correct?

[derick-montague]

@jandraa - are you doing research and discovery on this as part of #403?

[jandraa]

@jandraa - are you doing research and discovery on this as part of #403?

Yes, definitely!
I am looking at all of TPM (the sensor for the FRU, enable/disable for the policy, and virtual TPM configurations). I am doing it this way to understand the wider use case and be able to get a better idea of where these things should live and in proximity to what.

So far, I have not created any designs yet. Maybe at that point it would make sense for them to be separate issues, especially if this ends up in a different panel than the sensor, for example.

[derick-montague]

Maybe at that point it would make sense for them to be separate issues, especially if this ends up in a different panel than the sensor, for example.

@gtmills and I discussed that today. That seems odd, but maybe with more discovery it makes sense. I will add this as a dependency.

[jandraa]

Different issues seems odd or different panels?

[derick-montague]

That TPM is on its own panel, but I could be wrong.

[jandraa]

My thinking, as of now, is that the actual TPM sensor would be on the Hardware Status with the other FRUs, and the policy would be with security stuff (I'm still figuring out what all 'security stuff' would entail).

[gtmills]

@derick-montague Why the blocked by the #403 ?

[jandraa]

Will be placed with the Server Power operations (power on, orderly shutdown, reboot, etc.)

The logic is the required policy will really only matter and take effect during reboot/power on. Additionally, this is where users would be configuring 'how' the boot occurs.

Chris and Nick agree.

[dixsie]

Resolved by: https://gerrit.openbmc-project.xyz/c/openbmc/phosphor-webui/+/23928

[rfrandse]

https://gerrit.openbmc-project.xyz/c/openbmc/phosphor-webui/+/23928 merged