Enabling Dragonboard 410c built-in fTPM in Debian Buster

I am investigating the possibilities to enable the Dragonboard 410c built-in fTPM in Linaros Debian Buster OS image and use it to store the disk encryption key. But I cannot find any information about this at all in any forums. Does anyone have information about how to do this? Or isn’t it possible in Debian, only in Windows 10 IoT?


I assume the firmware-TPM implementation is exposed from qualcomm trustzone (closed-source) sotfware (QSEE) though their SCM interface (smc call), but since there is no public documentation of that interface, it’s not clear how to invoke this ‘TPM service’, and there is no upstream driver supporting that.