Hi,

I am trying to load a certificate in the TPM through this command:

tpm2pkcs11-tool -l --pin $PIN --write-object "$device_dir/client.der" --type cert --id 01 --label devicecert

I have tried with both .pem and .der format but it triggers the following error:

Using slot 0 with a present token (0x1)

ERROR: Expected attribute CKA_KEY_TYPE

error: PKCS11 function C_CreateObject failed: rv = CKR_TEMPLATE_INCOMPLETE (0xd0)

Aborting.

Is it a bug or the feature is yet to be implemented?

Thanks,

Clement