Re: [opencryptoki-users] error initializing token

[Klaus H. K. <kl...@li...>]

On Tue, 27 Jul 2010 12:19:45 -0500
Kent Yoder <shp...@gm...> wrote:

> Hi Alex,
> 
>  One thing I noticed today is that reinstalling from source while
> pkcsslotd is running will give you CKR_HOST_MEMORY (0x2) errors until
> you restart pkcsslotd.
> 
> Kent
> 
> 2010/7/21 Alexander Loukissas (aloukiss) <alo...@ci...>:
> > Hi guys,
> >
> > Perhaps any further insight to this issue?
> >
> > Thanks
> > Alex
> >

Alexander,

 I've just tested against Fedora 13 in my laptop (Lenovo T61), and
 appears to be working as expected.

 The process was really:

 * Enable TPM in BIOS. Power-cycle (this is important). TPM is cleared
   upon next boot

 * Install trousers. Start tscd service. tpm_atmel.ko is automatically
   loaded

 * Install opencryptoki and opencryptoki-libs. Run pkcs11_startup.
   Start pkcsslotd service

 * pkcsconf -t should show the software token and the TPM token, both
   with flags indicating it as still un-initialized.

 * use tpk_takeownership. Press enter to both passwords to set them to
   null.

 * usr tpktoken_init

 * pkcsconf -t should now report the TPM token as initialized. You can
   now start using it. Like I said, appears to be working fione here.

-Klaus

-- 
Klaus Heinrich Kiwi | kl...@br... | http://blog.klauskiwi.com
Open Source Security blog : 	http://www.ratliff.net/blog
IBM Linux Technology Center :	http://www.ibm.com/linux/ltc