Re: [Trustedjava-support] How to read EK Certificate from TPM

[Martin P. <Mar...@ia...>]

On 03/07/11 16:19, Mudassar Aslam wrote:
> When I execute jTpmTools command that is read_ekcert, I get following error:
> 05:03:49:253 [INFO] ReadEkCert::execute (147):  Unable to obtain EK 
> certificate for this TPM.

Hmm...


> My TPM has EK certificate which is shown when I use nv_decode command using 
> jTpmTools. The output is as follows:
> Index         Size        TPUD   Description
> ------------------------------------------------------------------------
> 0x10000001      20 bytes  ...D   deprecated DIR command area from TPM 1.1
> 0x30000001     576 bytes  ..UD   unknown index
> 0x1000f000    1704 bytes  ...D   TPM Endorsement Key Certificate
> 0x50000002      64 bytes  .P.D   Intel TXT INDEX_AUX

Alternatively you can also run
jtt nv_decode --index 0x1000f000 --dump-file ekcert.der


HTH,
Martin