Enabling attestation during return from S4 state with standard TCG hardware

A device configured as a TCG compliant system, comprising:

• CRMT logic for creating a normal boot log during pre-boot of the device following power-on;
• trust compliance logic associated with the CRMT logic that provides a verification signature for the normal boot log and appends a current TPM tick count to the normal boot log;
• a trusted platform module (TPM) with PCRs therein for storing the normal boot log along with its signature and TPM tick count appended thereto;
• S4 logic for placing said device in hibernation state, wherein S4 boot parameters of the device, similar to the normal boot log, are stored on a hard disk and the hardware components of the device are shut down;
• attestation and verification logic that authenticates an S4 boot log returned during a wake up from S4 state by attesting that the S4 boot log parameters are the same as the parameters of the normal boot log stored within the PCRs of the TPM.

A method comprising:

• in a computer system with a TPM, CRTM, BIOS, and S4 functionality, providing a verification signature to a normal boot log during a pre-boot process after power-on of the computer system;
• appending a current TPM tick count to the normal boot log;
• when the computer system is placed in an S4 state, storing a copy of the normal boot log parameters as an S4 boot log within a hard disk of the computer system;
• when a return from S4 state is triggered, attesting that the S4 boot log is the correct S4 boot log for that computer system with that TPM before enabling an S4 boot of the computer system;
• and
• when the S4 boot log cannot be attested as the correct S4 boot log, failing the S4 boot of the computer system.