Re: [Trustedjava-support] Problems with AIK creation

[Martin P. <Mar...@ia...>]

Good morning...

Till Bentz wrote:
> I try to create an AIK. For this process I need an EK credential.
> Unfortunately my manufacturer did not deliver one. Can someone give me a
> hint on how I can create one myself?

Use TCcert, or use JTpmTools to get one from our demo PrivacyCA setup
(mail me for authentication password)


> I set up my own little Privacy CA using
> openssl and I think I have therefore the necessary Keys and certificates to
> create an EK cred.

You implemented the additional Trusted Computing certificate
structures for OpenSSL?


> I tried to use tccert with my CA but the process failed, even with the
> included examples:
[...]
> generating CA certificates...
> CAroot
> iaik.utils.InternalErrorException
>        at iaik.pkcs.pkcs8.EncryptedPrivateKeyInfo.encrypt(Unknown Source)
>        at iaik.pkcs.pkcs8.EncryptedPrivateKeyInfo.encrypt(Unknown Source)
>        at iaik.pkcs.pkcs8.EncryptedPrivateKeyInfo.encrypt(Unknown Source)
>        at iaik.tc.cert.common.Common.writePrivateKeyToFile(Common.java:363)
>        at iaik.tc.TCcert.generateCA(TCcert.java:247)
>        at iaik.tc.TCcert.main(TCcert.java:118)

Last time some had this problem...
 https://sourceforge.net/mailarchive/forum.php?thread_name=01D30BAC-8036-4A59-9BCC-2101B48ADBA3%40cs.rice.edu&forum_name=trustedjava-support

...he didn't used the signed version of IAIK-JCE.


Are you sure you are using the _signed_ .jar version and not the _unsigned_ one?



HTH

-- 
Martin Pirker
IAIK, TU Graz