Re: [Trustedjava-support] key with pcr problem now

SourceForge Headquarters 225 Broadway Suite 1600 San Diego, CA 92101 +1 (858) 422-6466

Hi, Ronald,
Thank you for your reminder, I've configured the ps ini files and take ownership with jtss tools, errors are gone now.
All tpm commands (including pcr related ones) can be used under vista too, but I just kept getting 3 Failures: 
"CreateKeyWithPcr" and "SealAndUnsealWithPcrBoundKey" failed because "PCR information could not be interpreted".
"Quote2" failed because "Data must start with zero".
Could you help me around? All command info are below.
Thank you,
Stella
08:35:25:550 [DEBUG] TestMain::allTests (40): testsuite starting up
.08:35:26:813 [INFO] TcTddlVista::<clinit> (32): Windows Vista detected. Using TBS based TPM access.
08:35:26:846 [INFO] TcTddlVista::<clinit> (37): Native Vista DLL loaded from jar file.
.....08:35:31:353 [INFO] TestTpm::testGetEndorsementKeyNoOwner (90): Reading public EK without owner authorization is disabled.
.08:35:31:458 [INFO] TestTpm::testGetEndorsementKeyNoOwnerSelfValidate (130): Reading public EK without owner authorization is disabled.
....08:35:32:328 [INFO] TcTcsEventMgrMem::<init> (43): Using "in memory" event log.
...08:35:36:224 [DEBUG] TestKeys::testCreateKeyWithPcr (151): HERE
F......F.08:37:35:704 [INFO] TestEkCerts::testGetCredentials (40): Unable to obtain EK certificate for this TPM.
.08:37:49:107 [INFO] TestIdentityCreation::testCreateIdentity (230): AIK credential successfully received and activated at the client
....F.08:39:41:527 [INFO] TestPersistentStorage::testGetKeyByPublicInfoFromSystemPersistentStorage (85): key2 registered in persistent user storage with UUID: d8b63ed9-4dc2-42ff-adcb-86347cf714f9
08:39:41:582 [INFO] TestPersistentStorage::testGetKeyByPublicInfoFromSystemPersistentStorage (90): key registered in persistent system storage with UUID: c5436f5a-6c82-4744-a82d-02eede7feb36
.08:41:17:102 [INFO] TestPersistentStorage::testKeyHierarchyInitializationAndKeyLoading (234): key1 registered in persistent system storage with UUID: 7ba4a81b-f656-4ea6-b435-51b746b7b621
08:41:17:105 [INFO] TestPersistentStorage::testKeyHierarchyInitializationAndKeyLoading (238): key2 registered in persistent system storage with UUID: 00000000-0000-0000-0000-000000000002
08:41:17:107 [INFO] TestPersistentStorage::testKeyHierarchyInitializationAndKeyLoading (242): user key1 registered in persistent user storage with UUID: 00000000-0000-0000-0000-000000000004
08:41:17:109 [INFO] TestPersistentStorage::testKeyHierarchyInitializationAndKeyLoading (246): user key2 registered in persistent user storage with UUID: 9bea2977-ef97-4967-b465-3e77f22109d7
.08:41:49:461 [INFO] TestPersistentStorage::testGetRegisterKeysInSystemPersistentStorageSimpleTest (498): key1 registered in persistent system storage with UUID: c18ecd7f-cb8d-4364-b39e-bdebcf9f6ebb
08:41:49:463 [INFO] TestPersistentStorage::testGetRegisterKeysInSystemPersistentStorageSimpleTest (502): key2 registered in persistent system storage with UUID: 7aa37960-8a21-44b5-a67c-0041fb771ee5
.08:43:08:898 [INFO] TestPersistentStorage::testGetRegisterKeysInUserPersistentStorageSimpleTest (599): key1 registered in persistent user storage with UUID: aac5db20-e2e3-450a-a78d-fb0ff45a9704
08:43:08:899 [INFO] TestPersistentStorage::testGetRegisterKeysInUserPersistentStorageSimpleTest (603): key2 registered in persistent user storage with UUID: c95dfb75-676f-4cd2-8e29-06b422044867
.08:43:09:066 [INFO] TestPersistentStorage::testOwnerGetSRKPubKeyAndStore (662): SRK registered in persistent system storage with UUID: 82c4d170-ff8e-4232-8a93-7511bb3a33d5
.08:43:31:996 [INFO] TestPersistentStorage::testRegisterKeyInSystemPersistentStorage (708): key registered in persistent system storage with UUID: 1e368546-1ab6-49df-93c1-f9bf60bf3f94
.08:43:45:907 [INFO] TestPersistentStorage::testRegisterKeyInUserPersistentStorage (763): key registered in persistent user storage with UUID: 96d76d22-1443-4437-a0a7-2677a868b545
.08:43:54:695 [INFO] TestPersistentStorage::testSimpleKeyHierarchyTest (842): key1 registered in persistent system storage with UUID: b0ede414-f7f5-42eb-be6c-6d490129228a
08:44:07:879 [INFO] TestPersistentStorage::testSimpleKeyHierarchyTest (853): key2 registered in persistent system storage with UUID: c0bb7b77-134b-4679-8cdd-ae2a9399ef25
..
Time: 547.8
There were 3 failures:
1) testCreateKeyWithPcr(iaik.tc.tss.test.tsp.java.keys.TestKeys)junit.framework.AssertionFailedError: testCreateKeyWithPcr failed
 at iaik.tc.tss.test.tsp.java.keys.TestKeys.testCreateKeyWithPcr(TestKeys..java:159)
 at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
 at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
 at iaik.tc.tss.test.tsp.java.TestMain.allTests(TestMain.java:66)
 at iaik.tc.tss.test.tsp.java.TestMain.run(TestMain.java:30)
2) testQuote2(iaik..tc.tss.test.tsp.java.tpm.TestQuote)junit.framework.AssertionFailedError: testQuote2
 at iaik.tc.tss.test.tsp.java.tpm.TestQuote.testQuote2(TestQuote.java:119)
 at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
 at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
 at iaik.tc.tss.test.tsp.java.TestMain.allTests(TestMain.java:66)
 at iaik.tc.tss.test.tsp.java.TestMain.run(TestMain.java:30)
3) testSealAndUnsealWithPcrBoundKey(iaik.tc.tss.test.tsp.java.data.TestEncData)junit.framework.AssertionFailedError: sealing and unsealing failed
 at iaik.tc.tss..test.tsp.java.data.TestEncData.testSealAndUnsealWithPcrBoundKey(TestEncData.java:211)
 at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
 at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
 at iaik.tc.tss.test.tsp.java.TestMain.allTests(TestMain.java:66)
 at iaik.tc.tss.test.tsp.java.TestMain.run(TestMain.java:30)
FAILURES!!!
Tests run: 35,  Failures: 3,  Errors: 0
D:\TC\jTSS_0.3>tests\run_tests.cmd >> test.txt
iaik.tc.tss.api.exceptions.tcs.TcTpmException:
TSS Error:
error layer:                0x00 (TPM)
error code (without layer): 0x10
error code (full):          0x10
error message: PCR information could not be interpreted
        at iaik.tc.tss.impl.java.tcs.pbg.TcTpmCmdCommon.handleRetCode(TcTpmCmdCo
mmon.java:73)
        at iaik.tc.tss.impl.java.tcs.pbg.TcTpmCmdStorage.TpmCreateWrapKey(TcTpmC
mdStorage.java:316)
        at iaik.tc.tss.impl.java.tcs.tcsi.TcTcsi.TcsipCreateWrapKey(TcTcsi.java:
663)
        at iaik.tc.tss.impl.java.tsp.tcsbinding.local.TcTcsBindingLocal.TcsipCre
ateWrapKey(TcTcsBindingLocal.java:450)
        at iaik.tc.tss.impl.java.tsp.internal.TcTspInternal.TspCreateWrapKey_Int
ernal(TcTspInternal.java:1842)
        at iaik.tc.tss.impl.java.tsp.TcRsaKey.createKey(TcRsaKey.java:390)
        at iaik.tc.tss.test.tsp.java.keys.TestKeys.testCreateKeyWithPcr(TestKeys
.java:142)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
        at java.lang.reflect.Method.invoke(Unknown Source)
        at junit.framework.TestCase.runTest(TestCase.java:168)
        at junit.framework.TestCase.runBare(TestCase.java:134)
        at junit.framework.TestResult$1.protect(TestResult.java:110)
        at junit.framework.TestResult.runProtected(TestResult.java:128)
        at junit.framework.TestResult.run(TestResult.java:113)
        at junit.framework.TestCase.run(TestCase.java:124)
        at junit.framework.TestSuite.runTest(TestSuite.java:232)
        at junit.framework.TestSuite.run(TestSuite.java:227)
        at junit.framework.TestSuite.runTest(TestSuite.java:232)
        at junit.framework.TestSuite.run(TestSuite.java:227)
        at junit.textui.TestRunner.doRun(TestRunner.java:116)
        at junit.textui.TestRunner.doRun(TestRunner.java:109)
        at junit.textui.TestRunner.run(TestRunner.java:77)
        at iaik.tc.tss.test.tsp.java.TestMain.allTests(TestMain.java:66)
        at iaik.tc.tss.test.tsp.java.TestMain.run(TestMain.java:30)
iaik.tc.tss.api.exceptions.tsp.TcTspException:
TSS Error:
error layer:                0x3000 (TSP)
error code (without layer): 0x04
error code (full):          0x3004
error message: An internal SW error has been detected.
additional info:
TSS Error:
error layer:                0x3000 (TSP)
error code (without layer): 0x04
error code (full):          0x3004
error message: unknown
additional info: GeneralSecurityException: Data must start with zero

        at iaik.tc.tss.impl.java.tsp.TcHash.verifySignature(TcHash.java:369)
        at iaik.tc.tss.impl.java.tsp.TcTpm.quote2(TcTpm.java:1364)
        at iaik.tc.tss.test.tsp.java.tpm.TestQuote.testQuote2(TestQuote.java:91)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
        at java.lang.reflect.Method.invoke(Unknown Source)
        at junit.framework.TestCase.runTest(TestCase.java:168)
        at junit.framework.TestCase.runBare(TestCase.java:134)
        at junit.framework.TestResult$1.protect(TestResult.java:110)
        at junit.framework.TestResult.runProtected(TestResult.java:128)
        at junit.framework.TestResult.run(TestResult.java:113)
        at junit.framework.TestCase.run(TestCase.java:124)
        at junit.framework.TestSuite.runTest(TestSuite.java:232)
        at junit.framework.TestSuite.run(TestSuite.java:227)
        at junit.framework.TestSuite.runTest(TestSuite.java:232)
        at junit.framework.TestSuite.run(TestSuite.java:227)
        at junit.textui.TestRunner.doRun(TestRunner.java:116)
        at junit.textui.TestRunner.doRun(TestRunner.java:109)
        at junit.textui.TestRunner.run(TestRunner.java:77)
        at iaik.tc.tss.test.tsp.java.TestMain.allTests(TestMain.java:66)
        at iaik.tc.tss.test.tsp.java.TestMain.run(TestMain.java:30)
iaik.tc.tss.api.exceptions.tcs.TcTpmException:
TSS Error:
error layer:                0x00 (TPM)
error code (without layer): 0x10
error code (full):          0x10
error message: PCR information could not be interpreted
        at iaik.tc.tss.impl.java.tcs.pbg.TcTpmCmdCommon..handleRetCode(TcTpmCmdCo
mmon.java:73)
        at iaik.tc.tss.impl.java.tcs.pbg.TcTpmCmdStorage.TpmUnseal(TcTpmCmdStora
ge.java:167)
        at iaik.tc.tss.impl.java.tcs.tcsi.TcTcsi.TcsipUnseal(TcTcsi.java:1478)
        at iaik.tc.tss.impl.java.tsp.tcsbinding.local.TcTcsBindingLocal.TcsipUns
eal(TcTcsBindingLocal.java:435)
        at iaik.tc.tss.impl.java.tsp.internal.TcTspInternal.TspUnseal_Internal(T
cTspInternal.java:1699)
        at iaik.tc.tss.impl.java.tsp.TcEncData.unseal(TcEncData.java:263)
        at iaik.tc.tss.test.tsp.java.data.TestEncData.testSealAndUnsealWithPcrBo
undKey(TestEncData.java:190)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
        at java.lang.reflect.Method.invoke(Unknown Source)
        at junit.framework.TestCase.runTest(TestCase.java:168)
        at junit.framework.TestCase.runBare(TestCase.java:134)
        at junit.framework.TestResult$1.protect(TestResult.java:110)
        at junit.framework.TestResult.runProtected(TestResult.java:128)
        at junit.framework.TestResult.run(TestResult.java:113)
        at junit.framework.TestCase.run(TestCase.java:124)
        at junit.framework.TestSuite.runTest(TestSuite.java:232)
        at junit.framework.TestSuite.run(TestSuite.java:227)
        at junit.framework.TestSuite.runTest(TestSuite.java:232)
        at junit.framework.TestSuite.run(TestSuite.java:227)
        at junit.textui.TestRunner.doRun(TestRunner.java:116)
        at junit.textui.TestRunner.doRun(TestRunner.java:109)
        at junit.textui.TestRunner.run(TestRunner.java:77)
        at iaik.tc.tss.test.tsp.java.TestMain.allTests(TestMain.java:66)
        at iaik.tc.tss.test.tsp.java.TestMain.run(TestMain.java:30)

----- Original Message ----
From: Ronald Tögl <ron...@ia...>
To: Stella Brooks <ste...@ya...>; tru...@li...
Sent: Tuesday, July 29, 2008 10:31:31 PM
Subject: Re: [Trustedjava-support] PS and other problems in testsuits

Hi Stella,

You need to configure the PS in the jTSS .ini files.
You also need to unlock the commands with PCR access (quote, pcr_read 
and pcr_extend) in the Vista system policy.
Please refer to the jTSS documentation for details.

Also try to set you SRK password to TSS_WELL_KNOWN_SECRET (=20 bytes of 
0). Windows should do so upon taking ownership.

In addition we are aware of a problem with Atmel TPM 1.2 on some Lenovo 
machines regarding PCR accesses. Actually, we are waiting for delivery 
of a notebook with such a configuration that will allow us to analyse 
this issue..

Regards,
Ronald

Stella Brooks wrote:
> hi, I use atmel TPM 1.2, enabled, activated, and take ownship with 
> vista. SRK pwd is null.
>  
> when I tried the demo with command prompt as Admin, but both sys and 
> user's PS won't work (3 ERRORS), and I got 9 other failures, seems 
> createkeywithpcr and many other functions can't work either: 
>  
> I also tried to clearownership and use the testsuit, still got this 
> problem. Could you help me out here? The log is below.
>  
> Thank you.

-- 
Dipl.-Ing. Ronald Tögl          phone +43 316/873-5502
Trusted Computing Labs          fax  +43 316/873-5520
IAIK                            ron...@ia...
Graz University of Technology  http://www.iaik.tugraz.at