Re: [Trustedjava-support] jtpmtools read_pubek / JUnit test fails with Insufficient TPM resources

[Thomas W. <tho...@ia...>]

Hello,

> ok i found out the "Insufficient TPM resources" problem.
> TPM has the functionality to resist dictionary attacks, which causes
> to block requests to tpm causing this error. Although it is happening
> very often, which is causing very frequent resets. if sumone has a
> work around this .. please do enlighten.

I do not think that your problem is related to the TPM being in some 
lock mode. When preventing against dictionary attacks the TPM should 
return TPM_E_DEFEND_LOCK_RUNNING instead of TPM_E_RESOURCES.
My feeling is that there is somthing wrong the resource management (key 
slots, auth sessions, ...) in the TSS. Keep in mind that TrouSerS 
currently is not so well tested on 1.2 TPMs.

> 
> but the main problem still remains.
> I am still not able to use read_pubek option in jTPMtools. It gives me
> the following error :

[...]

>   error message: TPM layer: Authentication failed
>         at iaik.tss.impl.jni.TcBaseObject.handleRetCode(TcBaseObject.java:102)
>         at iaik.tss.impl.jni.TcTpm.getPubEndorsementKey(TcTpm.java:99)

For reading the owner secret of an owned (1.2) TPM you have to supply 
the password you set at TakeOwnership. If the TPM complains about a 
failed authentication, this most likely results from an invalid password.

Regards,
Thomas Winkler