Re: [Trustedjava-support] Problems with jTpmTools and/or JTSS

[Martin P. <Mar...@ia...>]

Till Bentz wrote:
> I am new to this list so fist a hello to everyone.

Hi, welcome to the world of Trusted Computing :-)

> Now my problem. :)

JTpmTools can work with both pure JTss and the JTssWrapper.
On startup JTpmTools tries to be smart and autodetect which variant to use.

If "iaik_jtss_wrapper.jar", "iaik_jtss_wrapper_swig.jar" and
"libtspiwrapper.so" and a running TrouSerS are present, it will use
the JTssWrapper, otherwise it will fall back to pure JTss.

Both options have advantages and disadvantages: the wrapper maps to
TrouSerS and thus is pretty 1.1 feature complete, but introduces the
fragility/complexity of the JNI mapping (e.g. 64bit support hasn't
received much testing). JTss offers some 1.2 things like access to
the on-chip certificates, while still lacking implementation even for
fundamental things like key persistant storage.

Summarizing, it's all "under construction", wear a hard hat while
venturing :-)


> LOG_DEBUG TSPI ../tcsd_api/clntside.c:102 Sending TSP packet to host localhost.
> LOG_DEBUG TSPI ../tcsd_api/clntside.c:118 Connecting to 127.0.0.1
> LOG_ERR TSPI ../tcsd_api/clntside.c:121 ERROR: connect: Connection refused
> LOG_ERR TSPI ../tcsd_api/tcstp.c:247 ERROR: Failed to send packet

This appears to be a problem with your TrouSerS setup...


> 18:18:04:207 [INFO] CommonSettings::getTssFactory (39): TrouSerS and/or
> jTSS Wrapper not found. Trying IAIK jTSS.

...so the fallback to JTss is tried instead


> I just installed JTSS, jTpmTools and the wrapper. I then took ownership of
> my TPM, which is a STM 1.2 on a Dell Optiplex GX620, using the following
> command:

ST got the least testing, but it was tested on ST before release and
it worked AFAIR.
Hm.
Sorry, can't help right now why JTss isn't working on ST.


HTH

-- 
Martin Pirker
IAIK, TU Graz