From 6346207b20c4478a1c57425a4a541b6a41a2f833 Mon Sep 17 00:00:00 2001 From: Yakiv Huryk <62013282+Yakiv-Huryk@users.noreply.github.com> Date: Thu, 5 Sep 2024 09:41:55 +0300 Subject: [PATCH] [Mellanox] set default IMA algorithm to sha384 on SN4280 (#19973) - Why I did it To avoid the following error message: ima: No suitable TPM algorithm for boot aggregate - How I did it Set the IMA hash algorithm to sha384 so the IMA can find the TPM algorithm - How to verify it Manual test Signed-off-by: Yakiv Huryk --- device/mellanox/x86_64-nvidia_sn4280-r0/installer.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/device/mellanox/x86_64-nvidia_sn4280-r0/installer.conf b/device/mellanox/x86_64-nvidia_sn4280-r0/installer.conf index b5ee161d1eaa..867e2217ce1b 100644 --- a/device/mellanox/x86_64-nvidia_sn4280-r0/installer.conf +++ b/device/mellanox/x86_64-nvidia_sn4280-r0/installer.conf @@ -1 +1 @@ -ONIE_PLATFORM_EXTRA_CMDLINE_LINUX="libata.force=noncq module_blacklist=mlx5_ib,mlx5_core" +ONIE_PLATFORM_EXTRA_CMDLINE_LINUX="libata.force=noncq module_blacklist=mlx5_ib,mlx5_core ima_hash=sha384"