From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: multipart/mixed; boundary="===============1783263232798409977==" MIME-Version: 1.0 From: Tadeusz Struk Subject: Re: [tpm2] Policy check fails writing to NVRAM > 512B Date: Wed, 13 Jun 2018 11:28:58 -0700 Message-ID: <1ae2f36e-7bc1-6529-e532-c5b281f60da6@intel.com> In-Reply-To: 231a0147-4fa9-71d7-587d-65efcf7af8c1@intel.com List-ID: To: tpm2@lists.01.org --===============1783263232798409977== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable On 06/13/2018 11:13 AM, Tadeusz Struk wrote: > On 06/13/2018 11:06 AM, Gabriela Limonta M=C3=A1rquez wrote: >> $ export TSS2_LOG=3D"all+ERROR,tcti+TRACE" >> >> $ tpm2_nvwrite -x 0x1800005 -a 0x1800005 -L sha256:0 -F pcr.value ta_con= fig.cfg >> ERROR: Failed to write NV area at index 0x1800005 (25165829) offset 0x20= 0. Error:0x99d >> ERROR: Unable to run tpm2_nvwrite >> >> Am I doing something wrong? or are the TSS logs available somewhere else= after I execute the command and that is why I see nothing? >> >> I also tried enabling logging as TSS2_LOG=3D"all+TRACE", but I only see = debug and trace logs from marshal and none of them say error or anything si= milar. > = > That all looks good. The only thing that's probably missing is that the d= ebug is not compiled into TSS. > It needs to be enabled at compile time by --with-maxloglevel=3Dtrace > Please see ./configure --help > Could you recompile TSS with that enabled and try again. Just looked at the config and see that the 'trace' is the default if you bu= ild it from the repo. Are you running your commands with sudo by any chance? Thanks, -- = Tadeusz --===============1783263232798409977==--