Re: [opencryptoki-users] tpmtoken_init, set the SO PIN fail

[Tom L. <to...@us...>]

Michal Prochazka <mi...@ic...> wrote on 01/19/2007 07:10:42 AM:

Snip...

> tcs_wrap_GetPubkey
> TCS tcskcm.c:746 Entering Get pub key
> TCS tcskcm.c:751 Auth Used
> TCS cache.c:200 ensureKeyIsLoaded: 0x40000000
> TCS cache.c:793 mc_get_slot_by_handle: TCSD mem_cached handle:
> 0x40000000
> TCS cache.c:205 keySlot is 40000000
> TCS cache.c:972 mc_update_time_stamp: TCSD mem_cached handle: 0x40000000
> TCS cache.c:230 ensureKeyIsLoaded: Exit
> TCS tcskcm.c:763 GetPubKey: handle: 0x40000000, slot: 0x40000000
> To TPM: 00 C2 00 00 00 3B 00 00 00 21 40 00 00 00 00 00
> To TPM: 00 00 0D 8C A9 33 CE 59 3C C2 FB 6E 85 32 B4 4F
> To TPM: AA 6C C4 82 B0 DC 00 C3 83 6C E1 C0 CF 8F 81 4A
> To TPM: D6 EE 81 5D E0 76 E3 F4 69 C9 D5
> TDDL tddl.c:105 Calling write to driver
> From TPM: 00 C4 00 00 00 0A 00 00 00 0C

Snip...

> LOG_ERR TPM_STDLL tpm_specific.c:300 ERROR: Tspi_Key_GetPubKey failed:
> rc=0xc
> LOG_ERR TPM_STDLL tpm_specific.c:1075 ERROR: token_wrap_sw_key failed.
> rc=0xc
> LOG_ERR TPM_STDLL tpm_specific.c:1731 ERROR: FAILED creating SO tree.
> ST MSG TPM_STDLL new_host.c:1224 whammy
> C_SetPIN failed: 0x00000006 (6)
> LOG_DEBUG TSPI ../tcsd_api/tcstp.c:355 TCS_CloseContext_TP: TCS Context:
> 0xa0a79e06
>
>
> I see the "ERROR: Tspi_Key_GetPubKey failed" but I don't know what to
> do?
>

Ok, is this a 1.2 TPM? If that's the case I think I know what the problem
is...  With 1.2, the SRK public key cannot be read by default.  You must
enable the reading of the SRK public key through the TSS.  Sounds like
we need a new command for tpm-tools.

Kent, does trousers have support for changing this setting for 1.2 TPMs?
What needs to be done?

Michal, you may have to write a small program to change this TPM flag in
the meantime.  Lets see what Kent says.

Thanks,
Tom

> Thanks in advance.
>
> Michal P.
> --
> Michal Prochazka // mi...@ic...
>
> Supercomputing Center Brno
> Institute of Computer Science
> Masaryk University
> Botanicka 68a, 60200 Brno, CZ
>
> CESNET z.s.p.o.
> Zikova 4, 16200 Praha 6, CZ
>