Re: [opencryptoki-users] error initializing token

[Klaus H. K. <kl...@li...>]

On Tue, 2010-07-20 at 11:23 -0500, Kent Yoder wrote:
> This is likely the TPM's SRK failing to load.  The TPM Token will try
> to load the SRK using a NULL password.  IIRC this can be set by just
> hitting enter when prompted for the password in tpm_changeownerauth
> -s. 

I'm confused now. What is the tpm token really expecting?
 - null owner secret?
 - 'well known' owner secret? i.e., tpm_takeownership -y
 - 'well known' srk secret? i.e., tpm_takeownership -z

I'm assuming that 'null password' is different than '20 bytes of
zero' (the 'well-known-secret').

Thanks,

 -Klaus
-- 
Klaus Heinrich Kiwi             | kl...@br... 
IBM LTC Security Development    | http://blog.klauskiwi.com
http://www.ibm.com/linux/ltc    | http://www.ratliff.net/blog