Menu

TPM key commad

sam
2018-11-19
2018-11-20
  • sam

    sam - 2018-11-19

    I am performing following command:

    ./createprimary -hi o -st -rsa
    Handle 80000000
    
    while executing following command getting error:
    ./createprimary -hi p -st -rsa
    createprimary: failed, rc 000009a2
    TPM_RC_BAD_AUTH - authorization failure without DA implications Session number 1
    
     ./create -hp 80000000 -ecc nistp256 -si -kt f -kt p -opr signeccpriv.bin -opu signeccpub.bin -opem signeccpub.pem -pwdp sto -pwdk sig
    create: failed, rc 000009a2
    TPM_RC_BAD_AUTH - authorization failure without DA implications Session number 1
    

    How to resolve above error to use createprimary and create command in order to generate ECC private and public keys in TPM.
    I tried belowed steps:
    /clear -hi p
    clear: failed, rc 000009a2
    TPM_RC_BAD_AUTH - authorization failure without DA implications Session number 1
    ./clear -hi l
    succeed
    Also in BIOS setting under TPM section I enabled clear keys in TPM.

     
    • Ken Goldman

      Ken Goldman - 2018-11-20
      1. The platform hierarchy is reserved for the platform OEM. User applications should normally use the storage (owner authorized) hierarchy.
       
      • sam

        sam - 2018-11-20

        could you give an example to perform it?

         
        • Ken Goldman

          Ken Goldman - 2018-11-20

          Looks at regests/initkeys.sh for basic examples. There are many more throughout the regression tests. Just don't use the platform hierarchy.

           

Log in to post a comment.