Security
Trusted Platform Module (TPM)
NOTE: For more information about the Trusted Platform Module, see
https://developer.ubuntu.com/en/snappy/guides/security-
whitepaper/
.
TPM is supported only on devices that have TPM hardware, and for those products which offer Snappy enhanced security support. The
TPM on/off setting is configurable in the BIOS and manageable in the operating system.
Running command:
admin@localhost:$ ls /dev/tpm0
If TPM is turned off, the device node (
/dev/tpm0
) does not exist.
(plano)ubuntu@localhost:$ ls /dev/tpm0
Is: cannot access /dev/tpm0: No such file or directory
If TPM is turned on, the device node (
/dev/tpm0
) exists.
(plano)ubuntu@localhost:$ ls /dev/tpm0
/dev/tpm0
Watchdog Timer (WDT)
NOTE: For more information about Watchdog Timer (WDT) commands, see
www.sat.dundee.ac.uk/~psc/watchdog/Linux-
Watchdog.html
.
It is recommended to enable the WDT by default to activate the fail-safe circuitry. Snappy, a WDT-compatible operating system provides
the capability to detect and recover the system from malfunctions or unexpected crashes.
Running command:
admin@localhost:$ systemctl show | grep –i watchdog
Returns:
RuntimeWatchdogUSec=10s
ShutdownWatchdogUSec=10min
NOTE: The default value is 10. The actual value should be greater than 0.
Restoring Ubuntu Core 16
When the operating system is restored to the factory image, all data on the system is deleted. You can restore Ubuntu Core 16 operating
system to the factory image using one of the following methods:
•
Restore Ubuntu Core 16 from USB flash drive
•
Restore Ubuntu Core 16 from the recovery partition on the Edge Gateway
–
Option 1: Restoring from the operating system
–
Option 2: Restoring during system POST
–
Option 3: Restoring from boot menu (Edge Gateway 3003 only)
Option 1: Restoring from the operating system
CAUTION: These steps will delete all the data on your Edge Gateway
1.
Connect the Edge Gateway remotely or through a KVM session.
2.
Log in to the operating system.
3.
Run the following command to trigger native eMMC recovery partition:.
$ sudo efibootmgr -n $(efibootmgr | grep "factory_restore" | sed 's/Boot//g' | sed 's/
[^0-9A-B]*//g') ; reboot
54
