Re: [Trustedjava-support] Integrity Measurement and Remote Attestation

[Saurabh A. <tan...@gm...>]

Hi

On 7/12/07, Carl Nickelson <car...@go...> wrote:
> Hello All,
>
> I am new to the Linux world and need some help to implement an integrity
> measurement for couple of files as a demonstration.
> I am using a TPM Emulator for all these tests and have successfully took
> ownership of it through the jTSS (which does not enable persistent storage)
>
> First from my understanding there are 2 ways to get the jTPM-Tools working.
> 1) Either through TrouSerS and the jTpm-Wrapper0.3
> 2) OR using the jTSS

I also implemented a remote attestation demo sometime back and I used
Trousers and jTssWrapper 025. It worked good on my HP dc7600 with
broadcom 1.2 TPM. The only hitch is that its hard to debug or "dwell"
into the code because of the native interface and trousers link and
the support frm mailing list is not very supportive. on the other
hand, jTSS has complete source code on platter.

>
> I have installed the TrouSerS and the jTpm-Wrapper0.3 (and 0.2.5) and run
> the 52 tests successfully in both distributions, however when trying through
> the jTPM-Tools I get the following error messages.
>
> ------------------------------
> ---------------------
> 23:34:47:240 [INFO] CommonSettings::getTssFactory (39): TrouSerS and/or jTSS
> Wrapper not found. Trying IAIK jTSS.
> 23:34:47:327 [INFO] TcTcsi::<clinit> (-1):      Unable to open TCS
> configuration file for system persistent storage information. Disabling
> system persistent storage.
> ---------------------------------------------------
>
> Therefore I installed jTSS works, but I noticed that persistent storage is
> not working and that there's additional commands which are available through
> the TSS and Wrapper, which I probably need them in my tests. So is there any
> helpful comments to get them working.
>
> If I start the Trusted Core Services Daemon tcsd of the TrouSerS TSS, I get
> another error message.
> -----------------------------------------------------------
> 23:50:18:338 [INFO] CommonSettings::getTssFactory (39): TrouSerS and/or jTSS
> Wrapper not found. Trying IAIK jTSS.
> 23:50:18:406 [WARN] TcTddlLinux::open (-1):     Unable to open TPM device
> file /dev/tpm.
> Reason: /dev/tpm (Device or resource busy)
>
> 23:50:18:407 [ERROR] TcTcsi::<clinit> (-1):     TCS startup failed.
>  23:50:18:407 [ERROR] TcTcsi::<clinit> (-1):
> TSS Error:
> error layer:                0x1000 (TDDL)
> error code (without layer): 0x87
> error code (full):          0x1087
> error message: The request could not be performed because of an IO device
> error.
> additional info: Unable to open TPM device file /dev/tpm.
> Reason: /dev/tpm (Device or resource busy)
>
> iaik.tc.tss.api.exceptions.tcs.TcTddlException:
> TSS Error:
> error layer:                0x1000 (TDDL)
> error code (without layer): 0x87
> error code (full):          0x1087
> error message: The request could not be performed because of an IO device
> error.
> additional info: Unable to open TPM device file /dev/tpm.
>  Reason: /dev/tpm (Device or resource busy)
> -----------------------------------------------------------

if you will run Trousers daemon, you will not be able to use with
jTSS. resource will be blocked by trousers daemon and hence the error.
you can use trousers here only with the jtsswrapper.

and I am not sure of this .. whether persistent storage has to do with
TPM emulator not supporting it ??

best
Tanish