Re: [opencryptoki-users] Can't get pkcsconf to work

[Tom L. <to...@us...>]

ope...@li... wrote on 02/20/2006 04:47:52
AM:

> Hi,
>
> I am trying to getting Opencryptoki (2.2.2-rc4) going with Trousers and
> the tpm_emulator. Unfortunately, I can't get passed tpm_takeownership,
> pkcsconf doesn't work (though it did a while ago). I am a member of the
> pkcs11 group. When is NVTOK.DAT supposed to be created?
>

One thing you can check is to see that your TPM SRK does not have a
password associated with it.  If you supplied an SRK password when you took
ownership then you'll need to perform a tpm_changeownerauth command using
the "-s" option to change/remove the SRK password.  When prompted to enter
the new SRK password just hit enter.  See if that helps.

> schneider@piquod:~$ /usr/sbin/pkcsconf -s
> LOG_DEBUG TSPI ../tcsd_api/clntside.c:58 Sending TSP packet to host
> localhost.
> LOG_DEBUG TSPI ../tcsd_api/clntside.c:74 Connecting to 127.0.0.1
> LOG_DEBUG TSPI ../tcsd_api/tcstp.c:388 TCS_OpenContext_RPC_TP: Received
> TCS Context: 0xa0c1b30b
> ST MSG TPM_STDLL loadsave.c:477 whammy
> ST MSG TPM_STDLL utility.c:788 whammy
> LOG_ERR TPM_STDLL loadsave.c:396 ERROR: failed
> opening /var/lib/opencryptoki/tpm/schneider/NVTOK.DAT for read: No such
> file or directory
> ST MSG TPM_STDLL new_host.c:488 whammy
> ST MSG TPM_STDLL new_host.c:506 whammy
> C_GetSlotCount returned 0 slots. Check that your tokens are installed
> correctly.
>
>
> /var/lib/opencryptoki/pk_config_data contains:
>
> TRUE|0|Linux 2.6.14-1-686 Linux (TPM)|Linux 2.6.14-1-686|TRUE|FALSE|
> TRUE|0|0|1|1|NONE|/usr/lib/opencryptoki/stdll/libpkcs11_tpm.so|
> ST_Initialize
>
> /var/log/debug contains:
>
> Feb 20 10:45:33 piquod openCryptokiModule[17850]: Logging enabled 1
> enabled
> Feb 20 10:45:33 piquod openCryptokiModule[17850]: C_GetFunctionList
> Feb 20 10:45:33 piquod openCryptokiModule[17850]: C_Initialize
> Feb 20 10:45:33 piquod openCryptokiModule[17850]: Anchor allocated at
> 804d380
> Feb 20 10:45:33 piquod openCryptokiModule[17850]: Shared memory b7cc6000
> Feb 20 10:45:33 piquod openCryptokiModule[17850]: API_Register
> MgrProcIndc 17850  pid 0
> Feb 20 10:45:33 piquod openCryptokiModule[17850]: DL_Load_and_Init
> dll_location /usr/lib/opencryptoki/stdll/libpkcs11_tpm.so
> Feb 20 10:45:33 piquod openCryptokiModule[17850]: DL_LOAD
> Feb 20 10:45:33 piquod openCryptokiModule[17850]: Empty slot at 0
> Feb 20 10:45:33 piquod TCSD[6063]: svrside.c:267 accepted socket 7
> Feb 20 10:45:33 piquod TCSD[6063]: tcsd_threads.c:193 Rx'd packet
> Feb 20 10:45:33 piquod TCSD[6063]: tcsd_wrap.c:3949 Dispatching ordinal
> 1
> Feb 20 10:45:33 piquod TCSD[6063]: tcsd_wrap.c:314 thread b7e37bb0
> servicing a tcs_wrap_OpenContext request
> Feb 20 10:45:33 piquod TCSD[6063]: tcsd_threads.c:241 Sending 0x4E bytes
> back
> Feb 20 10:45:33 piquod openCryptokiModule[17850]: return from STDDLL
> Init = 6
> Feb 20 10:45:33 piquod openCryptokiModule[17850]: C_GetSlotList
> Feb 20 10:45:33 piquod openCryptokiModule[17850]:  Pres 1 Count 0
> Feb 20 10:45:33 piquod TCSD[6063]: tcsd_threads.c:269 The TSP has closed
> the socket's connection. Thread exiting.
> Feb 20 10:45:33 piquod TCS[6063]: tcscm.c:43 Closing context A0C1A509
> Feb 20 10:45:33 piquod TCS[6063]: tcscm.c:55 Context A0C1A509 closed
>
> I can get the TPM to work by using Trousers directly.
>
> Any help appreciated,
>
>   Jochen
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc. Do you grep through log
files
> for problems?  Stop!  Download the new AJAX search engine that makes
> searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
> _______________________________________________
> opencryptoki-users mailing list
> ope...@li...
> https://lists.sourceforge.net/lists/listinfo/opencryptoki-users