[Trustedjava-support] Creating a certificate with Java and TPM

[Martin S. <mar...@go...>]

Hello,

we're working on a kind of TPM-based Certification Authority (CA). The
private key of the CA is located in a TPM which means that the
Certificate Signing Request (CSR) will be signed using a private key
**inside the TPM**.

In my understanding singing a CSR with a key in a TPM could be done
using OpenSSL and a OpenSSL TPM engine. OpenSSL and Java doesn't fit
too well together and there's also a Java Package java.security.cert
(http://java.sun.com/j2se/1.5.0/docs/api/java/security/cert/package-summary.html)
available that can be used for certificate creation. Can this package
be used with TPM, too? Or what would you recommend to us?

Thanks for your advice.