Hi,

you could check the documents and instructions on the page: https://www.infineon.com/cms/en/product/promopages/tpm-tss-quickstarter/

At the bottom of the page you can find a Appnote document, which shows the usage of the tpm-tools on a working setup and you can find the difference to your system. Section 5.2 shows the usage of the FAPI tpm2-tools and section 6.3.1. presents the ESAPI tpm2-tools.

Best,

Florian

From: Juncor <juncor.wu@gmail.com>
Sent: Freitag, 4. September 2020 03:22
To: tpm2@lists.01.org
Subject: [tpm2] Help for tpm-tools comand sequence

Caution: This e-mail originated outside Infineon Technologies. Do not click on links or open attachments unless you validate it is safe.

Hi Sir:

I had a embeded linux system project.

SOC: AM3352.

KERNEL 4.9.59 with slb9670 driver.

I can see the /dev/tpm0.

I build the tpm-tss 1.x and tpm-tools 2.X.

I didn't running tpm-abrmd and any resourcemgr.

I access direct to /dev/tpm.

I export two environment.

export TPM2TOOLS_TCTI_NAME=device

export TPM2TOOLS_DEVICE_FILE=/dev/tpm0

I want check the sign and verify.

Here is my command.

tpm2_createprimary -A e -g 0x000B -G 0x0001 -C primary_ctx

tpm2_create -g 0x000B -G 0x0001 -c primary_ctx -o kry_pub -O key_priv

tpm2_load -c primary_ctx -u kry_pub -r key_priv -n name -C eccsinging_key_ctx

tpm2_sing -c eccsigning_key_ctx -g 0x000B -m input_data -s signature

I alway got error after tpm2_sign command:

ERROR: ContextLoad Error. TPM Error:0x902.

I have no idea which step error?

Thanks for help.

Juncor