Re: [opencryptoki-users] help on pkcs11 talking to tpm chip

[Steven B. <sb...@au...>]

Have you set the SO Pin?
Sanjay Sha wrote:
> Hi,
> 
> I am trying to talk to the TPM chip using the pkcs11 interface.
> When I try changing the user PIN, I get the following error.
> 
> ~:# pkcsconf -c 0 -p
> Enter user PIN: *****
> Enter the new user PIN: ********
> Re-enter the new user PIN: ********
> Error logging in: 0x102
> 
> Can you please help...
> 
> FYI
> pkcs11_startup, populates the following entries in the pk_config_data.
> 
> TRUE|0|Linux 2.6.22-gg14-generic Linux (TPM)|Linux
> 2.6.22-gg14-generic|TRUE|FALSE|TRUE|0|0|1|1|NONE|libpkcs11_tpm.so|ST_Initialize
> TRUE|0|Linux 2.6.22-gg14-generic Linux (Soft)|Linux
> 2.6.22-gg14-generic|TRUE|FALSE|FALSE|0|0|1|1|NONE|libpkcs11_sw.so|ST_Initializ
> 
> Also, I could run pkcsconf -c 0 -I command to intialize the token, and
> pkcsconf -c 0 -u,  to initialize the user PIN.
> 
> pkcsconf -ts output:
> 
> Slot #0 Info
>         Description: Linux 2.6.22-gg14-generic Linux (TPM)
>         Manufacturer: Linux 2.6.22-gg14-generic
>         Flags: 0x5 (TOKEN_PRESENT|HW_SLOT)
>         Hardware Version: 0.0
>         Firmware Version: 1.1
> 
> Token #0 Info:
>         Label: tpm                            
>         Manufacturer: IBM Corp.                      
>         Model: TPM v1.1 Token 
>         Serial Number: 123            
>         Flags: 0x880445
> (RNG|LOGIN_REQUIRED|CLOCK_ON_TOKEN|TOKEN_INITIALIZED|USER_PIN_TO_BE_CHANGED|SO_PIN_TO_BE_CHANGED)
>         Sessions: -1/-1
>         R/W Sessions: -1/-1
>         PIN Length: 6-127
>         Public Memory: 0xFFFFFFFF/0xFFFFFFFF
>         Private Memory: 0xFFFFFFFF/0xFFFFFFFF
>         Hardware Version: 1.0
>         Firmware Version: 1.0
>         Time: 09:28:20
> 
> 
> Thank you,
> Sanjay
> 
> -- 
> 49:02:1f:d9:d5:10:98:58:12:af:56:e4:f1:34:cf:7e -Sunj
> www.sanjaysha.com <http://www.sanjaysha.com>
> 
> 
> ------------------------------------------------------------------------
> 
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems?  Stop.
> Now Search log events and configuration files using AJAX and a browser.
> Download your FREE copy of Splunk now >> http://get.splunk.com/
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> opencryptoki-users mailing list
> ope...@li...
> https://lists.sourceforge.net/lists/listinfo/opencryptoki-users