[Trustedjava-support] Integrity Measurement and Remote Attestation

[Carl N. <car...@go...>]

Hello All,

I am new to the Linux world and need some help to implement an integrity
measurement for couple of files as a demonstration.
I am using a TPM Emulator for all these tests and have successfully took
ownership of it through the jTSS (which does not enable persistent storage)

First from my understanding there are 2 ways to get the jTPM-Tools working.
1) Either through TrouSerS and the jTpm-Wrapper0.3
2) OR using the jTSS

I have installed the TrouSerS and the jTpm-Wrapper0.3 (and 0.2.5) and run
the 52 tests successfully in both distributions, however when trying through
the jTPM-Tools I get the following error messages.

---------------------------------------------------
23:34:47:240 [INFO] CommonSettings::getTssFactory (39): TrouSerS and/or jTSS
Wrapper not found. Trying IAIK jTSS.
23:34:47:327 [INFO] TcTcsi::<clinit> (-1):      Unable to open TCS
configuration file for system persistent storage information. Disabling
system persistent storage.
---------------------------------------------------

Therefore I installed jTSS works, but I noticed that persistent storage is
not working and that there's additional commands which are available through
the TSS and Wrapper, which I probably need them in my tests. So is there any
helpful comments to get them working.

If I start the Trusted Core Services Daemon tcsd of the TrouSerS TSS, I get
another error message.
-----------------------------------------------------------
23:50:18:338 [INFO] CommonSettings::getTssFactory (39): TrouSerS and/or jTSS
Wrapper not found. Trying IAIK jTSS.
23:50:18:406 [WARN] TcTddlLinux::open (-1):     Unable to open TPM device
file /dev/tpm.
Reason: /dev/tpm (Device or resource busy)

23:50:18:407 [ERROR] TcTcsi::<clinit> (-1):     TCS startup failed.
23:50:18:407 [ERROR] TcTcsi::<clinit> (-1):
TSS Error:
error layer:                0x1000 (TDDL)
error code (without layer): 0x87
error code (full):          0x1087
error message: The request could not be performed because of an IO device
error.
additional info: Unable to open TPM device file /dev/tpm.
Reason: /dev/tpm (Device or resource busy)

iaik.tc.tss.api.exceptions.tcs.TcTddlException:
TSS Error:
error layer:                0x1000 (TDDL)
error code (without layer): 0x87
error code (full):          0x1087
error message: The request could not be performed because of an IO device
error.
additional info: Unable to open TPM device file /dev/tpm.
Reason: /dev/tpm (Device or resource busy)
-----------------------------------------------------------

In addition when using the jTSS I am not able to create AIK key I get the
following Exception.
-----------------------------------------------------------------------------

00:20:25:506 [INFO] TcTcsi::<clinit> (-1):      Unable to open TCS
configuration file for system persistent storage information. Disabling
system persistent storage.
00:20:25:525 [INFO] CommonSettings::getTssFactory (47): IAIK jTSS found.
Using local bindings...
Exception in thread "main" java.lang.NoClassDefFoundError:
iaik/x509/X509ExtensionException
        at iaik.tc.apps.jtt.aik.AikCreate.execute(AikCreate.java:258)
        at iaik.tc.utils.cmdline.SubCommand.run (SubCommand.java:69)
        at iaik.tc.utils.cmdline.SubCommandParser.parse(
SubCommandParser.java:41)
        at iaik.tc.apps.JTpmTools.main(JTpmTools.java:110)
-------------------------------------------------------------------------------------


Thank you in advance for your help.

Regards, Carl