Re: [Trustedjava-support] Create certificate of key signed with EK

[Thomas W. <tc...@to...>]

Hello,

> -> I'd like to sign a certificate containing the public part of the key
> with the EK of the TPM so other host that know the public part of the
> remote EK can check that the remote host is geuine.

This is against the TPM spec. The spec does not allow you to directly use the 
EK for signing data or doing a TPM quote. To to that you would need a TPM 
that violates the TPM spec.

> Is a snippet of java code that creates a certificate and signs it with the
> EK available? (this is my biggest problem, I haven't find anything within
> jTpmTools sources with a quote using EK as signing key...)

You do not find such code in the jTpmTools for the reason explained above.

hth,
-- 
Thomas Winkler
tc...@to...