pupmod-simp-tpm | The SIMP tpm Puppet Module

pupmod-simp-tpm is a Ruby library. pupmod-simp-tpm has no bugs, it has no vulnerabilities and it has low support. However pupmod-simp-tpm has a Non-SPDX License. You can download it from GitHub, GitLab.

This module manages TPM, including taking ownership. You must take ownership of a TPM to load and unload certs, use it as a PKCS #11 interface, or to use SecureBoot. The TPM ecosystem has been designed to be difficult to automate. The difficulty has shown many downsides of using a tool like this module to manage your TPM device. For example, simply reading the TPM's public key after taking ownership of the device requires the owner password to be typed in at the command line. This is an intentional feature to encourage admins to be physically present at the machine with the device. To get around this, the provider included in this module and the advanced facts use Ruby's expect library to interact with the command line. This module also drops the owner password in the Puppet $vardir to make interacting with trousers in facts possible.