[tpm2] Re: Help for tpm-tools comand sequence

[tpm2] Re: Help for tpm-tools comand sequence

[Roberts, William C]

[-- Attachment #1: Type: text/plain, Size: 1572 bytes --]

It looks like you created this issue as well:
https://github.com/tpm2-software/tpm2-tools/issues/218

The takeaway here is that your major versions of tpm2-tools
Command line options are not compatible. 

The best bet is to always use tpm2-tools 4.0 or greater, or write your script
To handle each different version of the tools.

As of tpm2-tools 4.0, we froze the command line interface and it will always
be backwards compatible.

Thanks,
Bill

> -----Original Message-----
> From: Juncor <juncor.wu(a)gmail.com>
> Sent: Thursday, September 3, 2020 8:22 PM
> To: tpm2(a)lists.01.org
> Subject: [tpm2] Help for tpm-tools comand sequence
> 
> Hi Sir:
> 
> I had a embeded linux system project.
> SOC: AM3352.
> KERNEL 4.9.59 with slb9670 driver.
> 
> I can see the /dev/tpm0.
> I build the tpm-tss 1.x and tpm-tools 2.X.
> I didn't running tpm-abrmd and any resourcemgr.
> I access direct to /dev/tpm.
> 
> I export two environment.
> export TPM2TOOLS_TCTI_NAME=device
> export TPM2TOOLS_DEVICE_FILE=/dev/tpm0
> 
> I want check the sign and verify.
> Here is my command.
> tpm2_createprimary -A e -g 0x000B -G 0x0001 -C primary_ctx tpm2_create -g
> 0x000B -G 0x0001 -c primary_ctx -o kry_pub -O key_priv tpm2_load -c
> primary_ctx -u kry_pub -r key_priv -n name -C eccsinging_key_ctx tpm2_sing -c
> eccsigning_key_ctx -g 0x000B -m input_data -s signature
> 
> I alway got error after tpm2_sign command:
> ERROR: ContextLoad Error. TPM Error:0x902.
> 
> I have no idea which step error?
> 
> Thanks for help.
> 
> Juncor

[tpm2] Re: Help for tpm-tools comand sequence

[Florian.Schreiner]

[-- Attachment #1: Type: text/plain, Size: 1650 bytes --]

Hi,

you could check the documents and instructions on the page: https://www.infineon.com/cms/en/product/promopages/tpm-tss-quickstarter/
At the bottom of the page you can find a Appnote document, which shows the usage of the tpm-tools on a working setup and you can find the difference to your system. Section 5.2 shows the usage of the FAPI tpm2-tools and section 6.3.1. presents the ESAPI tpm2-tools.

Best,
Florian


From: Juncor <juncor.wu(a)gmail.com>
Sent: Freitag, 4. September 2020 03:22
To: tpm2(a)lists.01.org
Subject: [tpm2] Help for tpm-tools comand sequence

Caution: This e-mail originated outside Infineon Technologies. Do not click on links or open attachments unless you validate it is safe<http://iweb.infineon.com/en-US/Support/security/CDC/pse/Pages/pce.aspx>.


Hi Sir:

I had a embeded linux system project.
SOC: AM3352.
KERNEL 4.9.59 with slb9670 driver.

I can see the /dev/tpm0.
I build the tpm-tss 1.x and tpm-tools 2.X.
I didn't running tpm-abrmd and any resourcemgr.
I access direct to /dev/tpm.

I export two environment.
export TPM2TOOLS_TCTI_NAME=device
export TPM2TOOLS_DEVICE_FILE=/dev/tpm0

I want check the sign and verify.
Here is my command.
tpm2_createprimary -A e -g 0x000B -G 0x0001 -C primary_ctx
tpm2_create -g 0x000B -G 0x0001 -c primary_ctx -o kry_pub -O key_priv
tpm2_load -c primary_ctx -u kry_pub -r key_priv -n name -C eccsinging_key_ctx
tpm2_sing -c eccsigning_key_ctx -g 0x000B -m input_data -s signature

I alway got error after tpm2_sign command:
ERROR: ContextLoad Error. TPM Error:0x902.

I have no idea which step error?

Thanks for help.

Juncor

[-- Attachment #2: attachment.htm --]
[-- Type: text/html, Size: 10028 bytes --]