Re: vtpm_managerd and default passwords

[Luke <secureboot@gmail.com>]

Luke St.Clair wrote:
> 
> On Jul 26, 2007, at 4:53 PM, Cihula, Joseph wrote:
> 
>>
>>> From looking at the createkey utility source, it appears that it creates
>> a SHA-1 hash of the SRK auth provided on the command line.  The vTPM
>> Manager does not SHA the SRK auth.  So I think that you will need to add
>> another option to createkey that takes a provided auth as-is and then
>> try your file of all ff's.
>>
>>> Specifically, should vtpm_managerd take an SRK password as a
>>>  parameter? This seems much more sane.  Does this exist already, and
>>> I've just missed it?
>>
>> vTPM Manager is not intended to run alongside other TPM applications.
>> It does not use a TSS, and so it would not work well to try and use the
>> TPM simulataneously.  Similarly, it is not the expected use model that
>> once you have started using vTPM Manager that you will stop it, do some
>> things with the TPM, and then run it again.
>>
>> Can you describe how you would like to use the TPM and vTPM?
> 
> My goal is to be able to do all of the following, though no two need to
> occur simultaneously
> 
> 1) Run vtpm_managerd
> 2) create tpm keys in the dom0
> 3) create vtpm keys in the domu
> 
> Fixing the createkey worked like a charm in the dom0.
> 
> I still get TPM IOErrors in the domU though.
> 
> Can keys still be created using the VTPM?  Do they persist over multiple
> vtpm_managerd sessions?
> 
> If keys can be created, can anyone give an idea of how to do so?

The solution was quite simple - I simply hadn't taken ownership of the
virtual TPM from within the domU.

It is fixed now, and works quite well.  I've yet to check persistence
over sessions, but at least key creation/loading is working.