[Trustedjava-support] Migration

[Simon M. <sim...@in...>]

Hello,

we built some sort of certificate authority with a TPM inside.

We are currently searching for a sort of backup mechanism.
The Problem is that at the point when the backup blob should be  
created we don't have another TPM, so the REWRAP function isn't  
practicable.
To develop a migration authority to handle this, seems to be too much  
effort, as it is only a proof of concept project.
My question now is: Is there a third option for to make a backup of  
migratable keys? We are searching something which covers the function  
described in 1.4.2 of the following paper: http://www.ei.rub.de/media/ei/lehrmaterialien/trusted-computing/KeyReplication_.pdf

I grabbed the TPM specification already and didn't find something like  
that.

Thanks in advance,
best regards
Simon Mittelberger