Re: [Trustedjava-support] How to read EK Certificate from TPM

[Mudassar A. <mud...@ho...>]

Thanks for your reply. The problem still remains unsolved for me.

When I execute jTpmTools command that is read_ekcert, I get following error:
05:03:49:253 [INFO] ReadEkCert::execute (147):  Unable to obtain EK 
certificate for this TPM.

My TPM has EK certificate which is shown when I use nv_decode command using 
jTpmTools. The output is as follows:
Index         Size        TPUD   Description
------------------------------------------------------------------------
0x10000001      20 bytes  ...D   deprecated DIR command area from TPM 1.1
0x30000001     576 bytes  ..UD   unknown index
0x1000f000    1704 bytes  ...D   TPM Endorsement Key Certificate
0x50000002      64 bytes  .P.D   Intel TXT INDEX_AUX



-----Original Message----- 
From: Martin Pirker
Sent: Monday, March 07, 2011 2:54 PM
To: Mudassar Aslam
Cc: tru...@li...
Subject: Re: [Trustedjava-support] How to read EK Certificate from TPM

On 03/07/11 14:25, Mudassar Aslam wrote:
> 1. How can I read this EK certificate and store it in some folder
> (programmatically using jTSS or something else)

jTpmTools provides a command for this


> 2. Do you have an idea that from where I can get root certificate (of e.g.
> Infinion) of EK Certificate provided by Infinion so that I can verify
> signature on EK Certificate.

http://www.infineon.com/tpm/


HTH,
Martin