Re: [Trustedjava-support] How to set SRK secret to TSS_WELL_KNOWN_SECRET

[Ronald T. <ron...@ia...>]

Hi,

The SRK is not automatically registered in the TSS key database, as it 
is created within the TPM upon taking ownership.

As a trick, you can repeat the taking ownership procedure with jTpmTools 
- the command will not clear the existing ownership and skip the actual 
TPM command to create a new SRK but it will in any case store the SRK in 
the persistent storage.

AFAIR tpm.msc always uses the well known secret for the SRK.

Regards,
Ronald


On 03/09/2011 12:39 PM, Mudassar Aslam wrote:
> Hi
>
> I have initialized my tpm using tpm.msc utility in windows 7. It allowed me
> to set owner password. But I could not find any way to create/set SRK. I
> tried to execute take ownership code but it says "TPM ownership command is
> disabled". I have tried to list tpm keys using
>
> context_.getRegisteredKeysByUuid(null,TcTssConstants.TSS_PS_TYPE_SYSTEM);
>
> but I get null since SRK is not registered. How can I set SRK to
> TSS_WLL_KNOWN_SECRET?
>
> Regards.
>
> Mudassar.
>
>


-- 
Dipl.-Ing. Ronald Tögl          phone +43 316/873-5502
Secure and Correct Systems      fax   +43 316/873-5520
IAIK                            ron...@ia...
Graz University of Technology   http://www.iaik.tugraz.at