[Trustedjava-support] Difference in createKey() for Binding vs Signing keys

[Arshad N. <ars...@st...>]

Hi,

Is there a reason why the creation of a Signing key-pair always
prompts for the TPM Owner's password through a pop-up even though
the password is set in a BlobData structure and the Usage policy
for the TPM (set with the TPM Owner's password) is assigned to the
TPM?  The signing keys are set to be non-migratable.

This behavior is markedly different from creating migratable Binding
keys where the same secret and policy settings do not prompt for the
TPM Owner's password.

Any pointers to an explanation, and a suggestion for how to avoid
the pop-up for the signing-key creation, would be appreciated.
Thanks.

Arshad Noor
StrongAuth, Inc.