Re: [Trustedjava-support] Simultaneous access to TPM from different applications error

[Ronald T. <ron...@ia...>]

Hi Arshad,

Arshad Noor wrote:
> I've noticed that when one application uses the TPM and is finished
> with it (it has closed the context, but the application has not
> exited yet), another application on the same machine cannot access
> the TPM;
The TPM is a system resource which requires a singleton management 
service. For instance to swap keys and auth sessions in and out. This 
can either be offered by the OS (i.e. Windows TBS) or by the TCS layer 
of the TSS.

> Is this normal or a bug in JTSS?
This is the normal behaviour in the TCG architecture.

> If this is normal, how does one
> enable multiple applications accessing a TPM on the same machine
> (without the expense of SOAP calls)?
You cannot. That's what SOAP is there for in the first place. Only 
exception is using Windows, but there your application (JVM) would need 
Administrator rights to access the TBS directly.

Regards,
Ronald

-- 
Dipl.-Ing. Ronald Tögl          phone +43 316/873-5502
Trusted Computing Labs          fax   +43 316/873-5520
IAIK                            ron...@ia...
Graz University of Technology   http://www.iaik.tugraz.at