Re: [Trustedjava-support] How to read EK Certificate from TPM

[Mudassar A. <mud...@ho...>]

Hi again..

I also tried to dump contents to a file but the resultant file is not a 
proper certificate file. Because it could not be parsed by keytool or my 
default windows certificate viewer. :-(

regards.

Mudassar.

-----Original Message----- 
From: Martin Pirker
Sent: Monday, March 07, 2011 4:25 PM
To: Mudassar Aslam
Cc: tru...@li...
Subject: Re: [Trustedjava-support] How to read EK Certificate from TPM

On 03/07/11 16:19, Mudassar Aslam wrote:
> When I execute jTpmTools command that is read_ekcert, I get following 
> error:
> 05:03:49:253 [INFO] ReadEkCert::execute (147):  Unable to obtain EK
> certificate for this TPM.

Hmm...


> My TPM has EK certificate which is shown when I use nv_decode command 
> using
> jTpmTools. The output is as follows:
> Index         Size        TPUD   Description
> ------------------------------------------------------------------------
> 0x10000001      20 bytes  ...D   deprecated DIR command area from TPM 1.1
> 0x30000001     576 bytes  ..UD   unknown index
> 0x1000f000    1704 bytes  ...D   TPM Endorsement Key Certificate
> 0x50000002      64 bytes  .P.D   Intel TXT INDEX_AUX

Alternatively you can also run
jtt nv_decode --index 0x1000f000 --dump-file ekcert.der


HTH,
Martin