lf-edge/eve

Prompt user to perform TPM Clear in EVE Installer

Open

#4,952 opened on Jun 10, 2025

 (0 comments) (0 reactions) (0 assignees)Go (183 forks)auto 404
enhancementgood first issuehacktoberfest

Repository metrics

Stars
 (546 stars)
PR merge metrics
 (PR metrics pending)

Description

The EVE installer should prompt the user to perform a TPM clear operation during installation. Without this, EVE may reuse the existing device key stored in the TPM (specifically if BIOS is missing the option to clear TPM), which can cause onboarding issues such as duplicate device entries.

Problem Description

When a user re-images a device without clearing the TPM and hasn't removed the previous device configuration from the controller, EVE may reuse the existing device key in TPM. This can lead to:

  • Duplicate devices appearing in the controller
  • Onboarding failures or inconsistent behavior

Suggested Action

Update the EVE installer to:

  • Detect if a TPM is present
  • Prompt the user to clear the TPM if a device key already exists
  • Optionally, provide a warning or short explanation of the consequences of not doing so

Contributor guide