Tried this today.

However I couldn't access SHA-1 measurements on my T40. I followed the instructions on the site posted above. Atmel driver loads nicely with modprobe, but the mount command fails and /sys/kernel/security remains empty. Any suggestions?

I can use trusted grub to look at measurements that are taken before stage 2, but it's a bit awkward. It would be great to be able to attest to the whole system when it's running.