TPM usage from NI Linux RT

[B.Settles]

Can the TPM hardware on the new NI PXIe controllers be accessed/used in the NI Linux RT environment? When I look at the purchase pages for the controllers and I select the NI Linux RT OS, the TPM option is disabled. 

If the TPM chip can be used, how? I'm looking to store some private keys for encrypted communication and I'd like to use a more straight forward solution than my current solution.

[SumRunner]

Today, TPM software tools are not part of the NI Linux distribution. This means that if you want to use some of the standard Linux tools, you need to find the Linux libraries (like Clevis for encryption, or tpm2-tools for TPM) and add them manually to your Linux build. This is a bit trickier so you'll need someone with Linux expertise. I have had some customers implement these with success.

We know that accessing TPMs is becoming more important - so we are working to add this to a future build of NI Linux RT. If you email me at steve.summers@emerson.com, I can share more information about the work we are doing. 

[a_tucker]

For runtime operations, the tpm2-tools is good. There are tutorials for some of the operations: https://tpm2-software.github.io/tutorials/ , although admittedly these tutorials are a bit dense. There probably is some more approachable content on YouTube or other sites.

A possible workflow could look like - basic configuration / setup of key stores via command line or some small program/script you create for this purpose.

Hashes / attestations could probably be retrieved from LabVIEW RT via System Executive, which might need some intermediate script (created by you) to be called.

For (very basic) configuration and wiping, there are options in the BIOS: NI PXIe-8880 User Manual - National Instruments

[SumRunner]

We have an update on TPMs in NILRT.

The March NILRT update (Distribution NILRT 11, or Scarthgap) includes a number of new security features, including:

- TPM interfacing

- Encryption tools

- Linux Antivirus

- USB protections, to whitelist USB devices

Just today, we published a paper on how to use the TPM tools.Trusted Platform 2.0 (TPM) Frequently Asked Questions - NI.

We also recently announced a new cRIO chassis with an onboard TPM (based on the NI-9048). It's orderable today, but not on the web yet - the new PN is 785619-03.

We had a presentation about these new features at NI Connect. That presentation is available at https://www.ni.com/content/dam/web/pdfs/niconnect/2026/test-measurement-essentials/locking_down_your....