'WARNING: Call sdbootutil update-predictions --measure-pcr' -> NVIndex policy created

English Hardware
, ,
1

Leap 16.1

I just did an update - which looks large

There are a number of warnings, including:
WARNING: Call sdbootutil update-predictions --measure-pcr
But, I have no NVidia hardware - I’m all Intel. Any idea of the reason for this?

I ran sdbootutil update-predictions --measure-pcr with output:
NVIndex policy created
Do I want an NVIndex policy on a machine with no NVidia hardware?

What is the explanation for all this NVidea stuff on a machine with no NVidea?

hwinfo --short 
:~> hwinfo --short
cpu:                                                            
                       Intel(R) Core(TM) i3-N305, 1137 MHz
                       Intel(R) Core(TM) i3-N305, 1100 MHz
                       Intel(R) Core(TM) i3-N305, 1160 MHz
                       Intel(R) Core(TM) i3-N305, 1175 MHz
                       Intel(R) Core(TM) i3-N305, 1159 MHz
                       Intel(R) Core(TM) i3-N305, 1153 MHz
                       Intel(R) Core(TM) i3-N305, 1100 MHz
                       Intel(R) Core(TM) i3-N305, 1170 MHz
keyboard:
  /dev/input/event16   Dell SK-8125 Keyboard
  /dev/input/event0    AT Translated Set 2 keyboard
  /dev/tty2            serial console
mouse:
  /dev/input/mice      STAR0001:00 093A:0255 Mouse
  /dev/input/mice      STAR0001:00 093A:0255 Touchpad
  /dev/input/mice      Mi Silent Mouse
monitor:
                       LCD Monitor
graphics card:
                       Intel Alder Lake-N [UHD Graphics]
camera:
                       Realtek Hy-FHD(5307)-Camera
                       Realtek Hy-FHD(5307)-Camera
sound:
                       Intel Alder Lake-N PCH High Definition Audio Controller
storage:
                       Samsung Electronics NVMe SSD Controller PM9C1a (DRAM-less)
network:
  wlp0s20f3            Intel CNVi: Wi-Fi
network interface:
  wlp0s20f3            Ethernet network interface
  lo                   Loopback network interface
  tailscale0           Network Interface
disk:
  /dev/nvme0n1         Samsung Electronics NVMe SSD Controller PM9C1a (DRAM-less)
  /dev/zram0           Disk
partition:
  /dev/nvme0n1p1       Partition
  /dev/nvme0n1p2       Partition
  /dev/nvme0n1p3       Partition
usb controller:
                       Intel Alder Lake-N PCH USB 3.2 xHCI Host Controller
bios:
                       BIOS
bridge:
                       Intel Alder Lake-N PCH eSPI Controller
                       Intel Host bridge
                       Intel Alder Lake-N PCI Express Root Port #9
hub:
                       Dell Keyboard Hub
                       Genesys Logic Hub
                       Linux Foundation 2.0 root hub
                       Linux Foundation 3.0 root hub
memory:
                       Main Memory
bluetooth:
                       Intel AX211 Bluetooth
                       Intel AX211 Bluetooth
unknown:
                       FPU
                       DMA controller
                       PIC
                       Keyboard controller
                       PS/2 Controller
                       Intel GNA Scoring Accelerator
                       Intel Alder Lake-N SPI (flash) Controller
                       Intel Alder Lake-N Serial IO UART Host Controller
                       Intel Serial bus controller
                       Intel Alder Lake-N PCH Shared SRAM
                       Intel Alder Lake-N SMBus
                       Intel Serial bus controller
  /dev/input/event17   Dell SK-8125 Keyboard
:~>

And, this is sprinkled through out the output:

...
>>> Scriptlet output:                                                                                                                         
>>> NVIndex policy created                                                                                                                    
>>> WARNING: Volume key cannot be extracted. Dropping PCR 15                                                                                  
>>> WARNING: File measure-pcr-prediction should be updated                                                                                    
>>> WARNING: Call sdbootutil update-predictions --measure-pcr
...

Thanks

2

That doesn’t have anything to do with NVidia.

It’s NVram. NVIndex is a non-volatile part of the TPM that stores things like keys, policies, and measurements.

3

Oh dear, how very clever I feel… :rofl:
(And, I did do a bit of looking around before I posted - perhaps the omniscience of the omniscient search engine isn’t quite as advertised: NVIndex - to be fair, it does give two alternatives and I picked the wrong one).

1 Like