Arch Linux

barney

Member

Registered: 2020-12-14

Posts: 133

[SOLVED]problems with tpm2 after bios upgrade

After bios upgrade I get this failed services:

 UNIT                             LOAD   ACTIVE SUB    DESCRIPTION
● systemd-pcrlogin@1000.service    loaded failed failed TPM NvPCR Measurement of User Record for UID 1000
● systemd-pcrproduct.service       loaded failed failed TPM NvPCR Product ID Measurement
● systemd-tpm2-setup-early.service loaded failed failed Early TPM SRK Setup
● systemd-tpm2-setup.service       loaded failed failed TPM SRK Setup 

The output of the sudo journalctl -b -p err is:

Aug 22 14:15:13 dnevna kernel: virt/tdx: TDX not supported by the host platform
Aug 22 14:15:13 dnevna kernel: i2c i2c-1: Invalid 7-bit I2C address 0xffff
Aug 22 14:15:13 dnevna systemd-tpm2-setup[433]: TPM key integrity check failed. Key most likely does not belong to this TPM.
Aug 22 14:15:13 dnevna systemd-tpm2-setup[433]: Failed to acquire anchor secret: Object is remote
Aug 22 14:15:13 dnevna systemd-tpm2-setup[433]: TPM key integrity check failed. Key most likely does not belong to this TPM.
Aug 22 14:15:13 dnevna systemd-tpm2-setup[433]: Failed to acquire anchor secret: Object is remote
Aug 22 14:15:13 dnevna systemd-tpm2-setup[433]: TPM key integrity check failed. Key most likely does not belong to this TPM.
Aug 22 14:15:13 dnevna systemd-tpm2-setup[433]: Failed to acquire anchor secret: Object is remote
Aug 22 14:15:13 dnevna systemd-tpm2-setup[433]: TPM key integrity check failed. Key most likely does not belong to this TPM.
Aug 22 14:15:13 dnevna systemd-tpm2-setup[433]: Failed to acquire anchor secret: Object is remote
Aug 22 14:15:13 dnevna systemd[1]: Failed to start Early TPM SRK Setup.
Aug 22 14:15:14 dnevna systemd-pcrextend[468]: TPM key integrity check failed. Key most likely does not belong to this TPM.
Aug 22 14:15:14 dnevna systemd-pcrextend[468]: Could not extend NvPCR: Object is remote
Aug 22 14:15:14 dnevna systemd[1]: Failed to start TPM NvPCR Product ID Measurement.
Aug 22 14:15:14 dnevna systemd-tpm2-setup[469]: TPM key integrity check failed. Key most likely does not belong to this TPM.
Aug 22 14:15:14 dnevna systemd-tpm2-setup[469]: Failed to acquire anchor secret: Object is remote
Aug 22 14:15:14 dnevna systemd-tpm2-setup[469]: TPM key integrity check failed. Key most likely does not belong to this TPM.
Aug 22 14:15:14 dnevna systemd-tpm2-setup[469]: Failed to acquire anchor secret: Object is remote
Aug 22 14:15:14 dnevna systemd-tpm2-setup[469]: TPM key integrity check failed. Key most likely does not belong to this TPM.
Aug 22 14:15:14 dnevna systemd-tpm2-setup[469]: Failed to acquire anchor secret: Object is remote
Aug 22 14:15:14 dnevna systemd-tpm2-setup[469]: TPM key integrity check failed. Key most likely does not belong to this TPM.
Aug 22 14:15:14 dnevna systemd-tpm2-setup[469]: Failed to acquire anchor secret: Object is remote
Aug 22 14:15:14 dnevna systemd[1]: Failed to start TPM SRK Setup.
Aug 22 14:15:15 dnevna systemd-pcrextend[601]: TPM key integrity check failed. Key most likely does not belong to this TPM.
Aug 22 14:15:15 dnevna systemd-pcrextend[601]: Could not extend NvPCR: Object is remote
Aug 22 14:15:15 dnevna systemd[1]: Failed to start TPM NvPCR Product ID Measurement.
Aug 22 14:15:15 dnevna systemd-tpm2-setup[602]: TPM key integrity check failed. Key most likely does not belong to this TPM.
Aug 22 14:15:15 dnevna systemd-tpm2-setup[602]: Failed to acquire anchor secret: Object is remote
Aug 22 14:15:15 dnevna systemd-tpm2-setup[602]: TPM key integrity check failed. Key most likely does not belong to this TPM.
Aug 22 14:15:15 dnevna systemd-tpm2-setup[602]: Failed to acquire anchor secret: Object is remote
Aug 22 14:15:15 dnevna systemd-tpm2-setup[602]: TPM key integrity check failed. Key most likely does not belong to this TPM.
Aug 22 14:15:15 dnevna systemd-tpm2-setup[602]: Failed to acquire anchor secret: Object is remote
Aug 22 14:15:15 dnevna systemd-tpm2-setup[602]: TPM key integrity check failed. Key most likely does not belong to this TPM.
Aug 22 14:15:15 dnevna systemd-tpm2-setup[602]: Failed to acquire anchor secret: Object is remote
Aug 22 14:15:15 dnevna systemd[1]: Failed to start TPM SRK Setup.
Aug 22 14:15:15 dnevna bootctl[644]:  Mount point '/boot' which backs the random seed file is world accessible, which is a security ho>
Aug 22 14:15:15 dnevna bootctl[644]: Random seed file '/boot/loader/random-seed' is world accessible, which is a security hole!
Aug 22 14:15:27 dnevna systemd-pcrextend[850]: TPM key integrity check failed. Key most likely does not belong to this TPM.
Aug 22 14:15:27 dnevna systemd-pcrextend[850]: Could not extend NvPCR: Object is remote
Aug 22 14:15:27 dnevna systemd[1]: Failed to start TPM NvPCR Measurement of User Record for UID 1000.
Aug 22 14:15:27 dnevna uwsm_env-preloader[903]: /home/barney/.config/uwsm/env: line 2: xcb: command not found
Aug 22 14:15:27 dnevna uwsm_env-preloader[903]: /home/barney/.config/uwsm/env: line 6: xcb: command not found
Aug 22 14:15:30 dnevna systemd[857]: Failed to start Swaync notification daemon.
Aug 22 14:15:30 dnevna systemd[857]: Failed to start Swaync notification daemon.
Aug 22 14:15:30 dnevna systemd[857]: Failed to start Swaync notification daemon.
Aug 22 14:15:30 dnevna systemd[857]: Failed to start Swaync notification daemon.
Aug 22 14:15:30 dnevna systemd[857]: Failed to start Swaync notification daemon.

I want to regenerate tpm2 setup in order to get rid of this error messages. I don't use luks or any encription, so the system is boot-able.

PS. 0x0.st is not working, so I have posted the output of the commands with the bbc code.

Last edited by barney (2026-08-22 14:50:51)

seth

Member

From: Won't reply 2 private help req

Registered: 2012-09-03

Posts: 77,854

Re: [SOLVED]problems with tpm2 after bios upgrade

https://wiki.archlinux.org/title/Truste … _TPM_reset ?

PS. 0x0.st is not working

Yes, Mia succumbed to the clankers for now.
Think about that next time you talk to one of those bullshit generators.

---

How to upload text · How to boot w/o GUI · Disable Windows Fast-Start! · Fix your xinitrc

barney

Member

Registered: 2020-12-14

Posts: 133

Re: [SOLVED]problems with tpm2 after bios upgrade

https://wiki.archlinux.org/title/Truste … _TPM_reset ?

PS. 0x0.st is not working

Yes, Mia succumbed to the clankers for now.
Think about that next time you talk to one of those bullshit generators.

Thanks for the answer.
If you have suggestions for replacement of 0x0.st, please inform us, and please give some examples of usage of that service.

seth

Member

From: Won't reply 2 private help req

Registered: 2012-09-03

Posts: 77,854

Re: [SOLVED]problems with tpm2 after bios upgrade

1s link below actually lists a couple, try  eg.

… | nc termbin.com 9999
… | curl -s -H "Accept: application/json, */*" --upload-file - 'https://paste.c-net.org/'

Deleting /var/lib/systemd/nvpcr/nvpcr-anchor.cred worked then?

---

How to upload text · How to boot w/o GUI · Disable Windows Fast-Start! · Fix your xinitrc

barney

Member

Registered: 2020-12-14

Posts: 133

Re: [SOLVED]problems with tpm2 after bios upgrade

Deleting /var/lib/systemd/nvpcr/nvpcr-anchor.cred worked then?

That has solved the problem.
Thanks again.