Re: [Trustedjava-support] "Unable to open TPM device" error with aik_create

[rinberg\@libero\.it <ri...@li...>]

Hi. I can't create an aik certificate, the error is the same reported by =
Nektarios. This is my setup and the commands that fail. The EK cert has b=
een created by the iaik test server today.


rinaldo@talullah:~/newiaik/jTpmTools_0.3/ext_libs$ md5sum *
0fa07ab364b2c696fdea40ba0a42ec90  iaik_jce.jar
321c846448df1eeead65f7007ea0cb76  iaik_jtss_tcs.jar
699a1d5653d3bb6d4291c260e0d33c6d  iaik_jtss_tsp.jar
444a998ec535a37d6dd335254b897fbe  iaik_jtss_wrapper.jar
4f933fd2bebbb3bcef2974b722337574  iaik_jtss_wrapper_swig.jar
4fc96bac6143ccac3be5850ea8653d8d  iaik_tccert.jar
f1d00a83d6be8b8974678fb071d938d0  iaik_xkms.jar
f789ce61c05a8efd6c4c829f0cc607fd  iaik_xsect.jar


rinaldo@talullah:~/newiaik/jTpmTools_0.3$ ./jtt.sh version

  -----------------------------------
   IAIK/OpenTC        Java TPM Tools 
  - - - - -                 - - - - -
   using IAIK Trusted Computing libs 
         jTSS, TCcert and XKMS       
  -----------------------------------


15:53:02:449 [INFO] CommonSettings::getTssFactory (37): TrouSerS TSS foun=
d. Using JNI bindings...
 JTpmTools: 0.3 20070425 11:38:53
  JTSS_TSP: 0.1 20070425 10:54:03
  JTSS_JNI: 0.3 20070425 11:44:45 
      XKMS: 0.2-20070208 
    TCcert: 0.2.2-20070423-111432 



@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@=
@@@@@@@@@@@


rinaldo@talullah:~/newiaik/jTpmTools_0.3$ ./jtt.sh aik_create -a aik -l l=
abel -o opentc --aikfile aik.file --ekfile /home/rinaldo/ek.cert

  -----------------------------------
   IAIK/OpenTC        Java TPM Tools 
  - - - - -                 - - - - -
   using IAIK Trusted Computing libs 
         jTSS, TCcert and XKMS       
  -----------------------------------


15:35:12:704 [INFO] CommonSettings::getTssFactory (37): TrouSerS TSS foun=
d. Using JNI bindings...
***                                                                      =
 ***
***                    Welcome to the IAIK JCE Library                   =
 ***
***                                                                      =
 ***
*** This version of IAIK JCE is licensed for educational and research use=
 ***
*** and evaluation only. Commercial use of this software is prohibited.  =
 ***
*** For details please see http://jce.iaik.tugraz.at/sales/licences/.    =
 ***
*** This message does not appear in the registered commercial version.   =
 ***
***                                                                      =
 ***

15:35:13:178 [INFO] Client::overrideCertificates (113): overriding defaul=
t EK certificate used by TSS
15:35:13:180 [WARN] Client::overrideCertificates (121): Unable to overrid=
e EK certificate. If this is a TrouSerS TSS, you can set the EK certifica=
te in the tcsd.conf!
iaik.tc.tss.api.exceptions.tcs.TcTpmException: 

TSS Error:
error layer:                0x00 (TPM)
error code (without layer): 0x22
error code (full):          0x22
error message: An invalid handle was used.

        at iaik.tc.tss.impl.jni.tsp.TcBaseObject.handleRetCode(TcBaseObje=
ct.java:104)
        at iaik.tc.tss.impl.jni.tsp.TcTpm.collateIdentityRequest(TcTpm.ja=
va:1071)
        at iaik.tc.apps.jtt.aik.Client.collateIdentityReq(Client.java:99)=

        at iaik.tc.apps.jtt.aik.AikCreate.execute(AikCreate.java:301)
        at iaik.tc.utils.cmdline.SubCommand.run(SubCommand.java:69)
        at iaik.tc.utils.cmdline.SubCommandParser.parse(SubCommandParser.=
java:41)
        at iaik.tc.apps.JTpmTools.main(JTpmTools.java:110)
15:35:13:187 [ERROR] AikCreate::execute (305):  client: CollateIdentityRe=
quest failed

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@=
@@@@@@@@@@@@@@@@@@@@@@
the same happens using the --noek:

rinaldo@talullah:~/newiaik/jTpmTools_0.3$ ./jtt.sh aik_create -a aik -l l=
abel -o opentc --aikfile aik.file --noek

  -----------------------------------
   IAIK/OpenTC        Java TPM Tools 
  - - - - -                 - - - - -
   using IAIK Trusted Computing libs 
         jTSS, TCcert and XKMS       
  -----------------------------------


15:41:29:056 [INFO] CommonSettings::getTssFactory (37): TrouSerS TSS foun=
d. Using JNI bindings...
***                                                                      =
 ***
***                    Welcome to the IAIK JCE Library                   =
 ***
***                                                                      =
 ***
*** This version of IAIK JCE is licensed for educational and research use=
 ***
*** and evaluation only. Commercial use of this software is prohibited.  =
 ***
*** For details please see http://jce.iaik.tugraz.at/sales/licences/.    =
 ***
*** This message does not appear in the registered commercial version.   =
 ***
***                                                                      =
 ***

iaik.tc.tss.api.exceptions.tcs.TcTpmException: 

TSS Error:
error layer:                0x00 (TPM)
error code (without layer): 0x22
error code (full):          0x22
error message: An invalid handle was used.

        at iaik.tc.tss.impl.jni.tsp.TcBaseObject.handleRetCode(TcBaseObje=
ct.java:104)
        at iaik.tc.tss.impl.jni.tsp.TcTpm.collateIdentityRequest(TcTpm.ja=
va:1071)
        at iaik.tc.apps.jtt.aik.Client.collateIdentityReq(Client.java:99)=

        at iaik.tc.apps.jtt.aik.AikCreate.execute(AikCreate.java:301)
        at iaik.tc.utils.cmdline.SubCommand.run(SubCommand.java:69)
        at iaik.tc.utils.cmdline.SubCommandParser.parse(SubCommandParser.=
java:41)
        at iaik.tc.apps.JTpmTools.main(JTpmTools.java:110)
15:41:29:497 [ERROR] AikCreate::execute (305):  client: CollateIdentityRe=
quest failed


Any help would be appreciated.

Thank you,

Rinaldo Bergamini