[tpm2] Re: Help for tpm-tools comand sequence

[Florian.Schreiner at infineon.com]

[-- Attachment #1: Type: text/plain, Size: 1650 bytes --]

Hi,

you could check the documents and instructions on the page: https://www.infineon.com/cms/en/product/promopages/tpm-tss-quickstarter/
At the bottom of the page you can find a Appnote document, which shows the usage of the tpm-tools on a working setup and you can find the difference to your system. Section 5.2 shows the usage of the FAPI tpm2-tools and section 6.3.1. presents the ESAPI tpm2-tools.

Best,
Florian


From: Juncor <juncor.wu(a)gmail.com>
Sent: Freitag, 4. September 2020 03:22
To: tpm2(a)lists.01.org
Subject: [tpm2] Help for tpm-tools comand sequence

Caution: This e-mail originated outside Infineon Technologies. Do not click on links or open attachments unless you validate it is safe<http://iweb.infineon.com/en-US/Support/security/CDC/pse/Pages/pce.aspx>.


Hi Sir:

I had a embeded linux system project.
SOC: AM3352.
KERNEL 4.9.59 with slb9670 driver.

I can see the /dev/tpm0.
I build the tpm-tss 1.x and tpm-tools 2.X.
I didn't running tpm-abrmd and any resourcemgr.
I access direct to /dev/tpm.

I export two environment.
export TPM2TOOLS_TCTI_NAME=device
export TPM2TOOLS_DEVICE_FILE=/dev/tpm0

I want check the sign and verify.
Here is my command.
tpm2_createprimary -A e -g 0x000B -G 0x0001 -C primary_ctx
tpm2_create -g 0x000B -G 0x0001 -c primary_ctx -o kry_pub -O key_priv
tpm2_load -c primary_ctx -u kry_pub -r key_priv -n name -C eccsinging_key_ctx
tpm2_sing -c eccsigning_key_ctx -g 0x000B -m input_data -s signature

I alway got error after tpm2_sign command:
ERROR: ContextLoad Error. TPM Error:0x902.

I have no idea which step error?

Thanks for help.

Juncor

[-- Attachment #2: attachment.htm --]
[-- Type: text/html, Size: 10028 bytes --]