trustedjava-support — Trusted Java General Support

Re: [Trustedjava-support] (Windows) Running the TCS daemon directly without installing the service?

[Matthew G. <mat...@gm...>]

Ronald,

I was able to test and verify that TBS does indeed work in Windows PE,
I have a C++ app with everything static linked and was able to
communicate with the TPM directly with TbsiSubmitCommand() (may have
misspelled that somewhat)

Do you offer the source code for the jTssTddlVista? I've had issues
with this sort of thing in Win PE, and these problems had gone away
when static linking everything into the binary.


Thanks,

-Matt

>Hi,
>
>Likely there is an issue with the TPM Base Services or their interaction
>with our bridge-dll. (jTssTddlVista.dll just opens a channel to the MS
>TPM base service, which then talks to the driver/device)
>
>Actually, I don't believe that the TPM driver and services are active in
>Windows PE at all (we never tried this). According to
>http://technet.microsoft.com/en-us/library/hh824926.aspx
>you'll need to include those as extras in your PE configuration.
>
>Note that just starting the TCS daemon does not trigger any TPM access,
>only using it will open the driver.
>
>However, also a missing VC redistribution will cause a similar error.
>
>
>Ronald

Re: [Trustedjava-support] (Windows) Running the TCS daemon directly without installing the service?

[Ronald T. <ron...@ia...>]

Hi,

Likely there is an issue with the TPM Base Services or their interaction 
with our bridge-dll. (jTssTddlVista.dll just opens a channel to the MS 
TPM base service, which then talks to the driver/device)

Actually, I don't believe that the TPM driver and services are active in 
Windows PE at all (we never tried this). According to
  http://technet.microsoft.com/en-us/library/hh824926.aspx
you'll need to include those as extras in your PE configuration.

Note that just starting the TCS daemon does not trigger any TPM access, 
only using it will open the driver.

However, also a missing VC redistribution will cause a similar error.


Ronald


On 07/02/2014 11:01 PM, Matthew Galligan wrote:
> Looking at the source briefly, I pulled out the jTssTddlVista.dll and 
> threw them in the lib paths without much success. It is odd, this may 
> be related to the VC redist, as the relevant JAR is in the path, and I 
> am unsure why it can't load. I'll make sure my vc redist is working 
> and try again.
>
>
> On Tue, Jul 1, 2014 at 4:08 PM, Matthew Galligan 
> <mat...@gm... <mailto:mat...@gm...>> wrote:
>
>     Hello,
>
>     I have a use case where I need to do a one-time encryption of
>     something on a lot of workstations (2000+) and was hoping to run
>     the TCS daemon directly from command line for this so that I could
>     avoid permanently installing jTSS on all of these machines. I
>     periodically boot to another partition on these machines that has
>     jTSS installed.
>
>     In Windows, I have run the following (wild guess so probably
>     pretty wrong):
>
>     java -cp
>     .;C:\PROGRA~1\jTSS\soap\..\lib\iaik_jtss_tsp_tests.jar;C:\PROGRA~1\jTSS\soap\..\lib\iaik_jtss_tsp_soap.jar;C:\PROGRA~1\jTSS\soap\..\lib\iaik_jtss_tsp.jar;C:\PROGRA~1\jTSS\soap\..\lib\iaik_jtss_tcs_soap.jar;C:\PROGRA~1\jTSS\soap\..\lib\iaik_jtss_tcs.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\hsqldbmin.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\junit.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\xerces.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\wsdl4j-1.5.1.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\saaj.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\mail.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\log4j-1.2.8.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\jaxrpc.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\commons-logging-1.0.4.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\commons-discovery-0.2.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\commons-daemon.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\axis.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\axis-ant.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\activation.jar
>     -Djtss.tsp.ini.file=C:\PROGRA~1\jTSS\soap\..\lib\ini\jtss_tsp.ini
>     -Djtss.tcs.ini.file=C:\PROGRA~1\jTSS\soap\..\lib\ini\jtss_tcs.ini
>     iaik.tc.tss.impl.java.tcs.soapservice.server.StartAxisServerWindows
>
>     I copied the classpath out of the service properties and I get the
>     following output:
>
>     10:23:08:434 [INFO] StartAxisServerWindows::setupServer (81):
>     Initializing the
>      AXIS server
>     10:23:08:512 [INFO] StartAxisServerWindows::setupServer (87):  
>     AXIS server succ
>     essfully initialized
>     10:23:08:730 [INFO] StartAxisServerWindows::startServer (98):  
>     Try to start the
>      AXIS server
>     10:23:08:730 [INFO] StartAxisServerWindows::startServer (101):
>      AXIS server succ
>     essfully started
>     - starting up SimpleAxisServer on port 30004 (C:\Program
>     Files\jTSS\lib)
>
>
>     However, when I run jtt I get the following:
>       ---------------------
>        IAIK Java TPM Tools
>       ---------------------
>     10:32:16:878 [ERROR] TcTcsBindingSoap::connect (116):   There
>     seems no TCS runni
>     ng
>     10:32:16:893 [ERROR] TcTcsBindingSoap::connect (116):   There
>     seems no TCS runni
>     ng
>     iaik.tc.tss.api.exceptions.tsp.TcTspException:
>
>     TSS Error:
>     error layer:                0x3000 (TSP)
>     error code (without layer): 0x0103
>     error code (full):          0x3103
>     error message: Core Service connection failed.
>
>             at
>     iaik.tc.tss.impl.java.tsp.tcsbinding.soapservice.TcTcsBindingSoap.con
>     nect(TcTcsBindingSoap.java:117)
>             at
>     iaik.tc.tss.impl.java.tsp.internal.TcTspInternal.TspContextConnect_In
>     ternal(TcTspInternal.java:368)
>             at
>     iaik.tc.tss.impl.java.tsp.TcContext.connect(TcContext.java:174)
>             at iaik.tc.apps.jtt.tpm.TpmVersion.execute(TpmVersion.java:68)
>             at iaik.tc.utils.cmdline.SubCommand.run(SubCommand.java:69)
>             at
>     iaik.tc.utils.cmdline.SubCommandParser.parse(SubCommandParser.java:41
>     )
>             at iaik.tc.apps.JTpmTools.main(JTpmTools.java:224)
>
>     I've noticed the same behavior when running the daemon on linux.
>
>
>
>
> ------------------------------------------------------------------------------
> Open source business process management suite built on Java and Eclipse
> Turn processes into business applications with Bonita BPM Community Edition
> Quickly connect people, data, and systems into organized workflows
> Winner of BOSSIE, CODIE, OW2 and Gartner awards
> http://p.sf.net/sfu/Bonitasoft
>
>
> _______________________________________________
> Trustedjava-support mailing list
> Tru...@li...
> https://lists.sourceforge.net/lists/listinfo/trustedjava-support


-- 
Dr. Ronald Tögl                 phone +43 316/873-5502
Secure and Correct Systems      fax   +43 316/873-5520
IAIK                            ron...@ia...
Graz University of Technology   http://www.iaik.tugraz.at

Re: [Trustedjava-support] (Windows) Running the TCS daemon directly without installing the service?

[Matthew G. <mat...@gm...>]

Looking at the source briefly, I pulled out the jTssTddlVista.dll and threw
them in the lib paths without much success. It is odd, this may be related
to the VC redist, as the relevant JAR is in the path, and I am unsure why
it can't load. I'll make sure my vc redist is working and try again.


On Tue, Jul 1, 2014 at 4:08 PM, Matthew Galligan <mat...@gm...
> wrote:

> Hello,
>
> I have a use case where I need to do a one-time encryption of something on
> a lot of workstations (2000+) and was hoping to run the TCS daemon directly
> from command line for this so that I could avoid permanently installing
> jTSS on all of these machines. I periodically boot to another partition on
> these machines that has jTSS installed.
>
> In Windows, I have run the following (wild guess so probably pretty
> wrong):
>
> java -cp
> .;C:\PROGRA~1\jTSS\soap\..\lib\iaik_jtss_tsp_tests.jar;C:\PROGRA~1\jTSS\soap\..\lib\iaik_jtss_tsp_soap.jar;C:\PROGRA~1\jTSS\soap\..\lib\iaik_jtss_tsp.jar;C:\PROGRA~1\jTSS\soap\..\lib\iaik_jtss_tcs_soap.jar;C:\PROGRA~1\jTSS\soap\..\lib\iaik_jtss_tcs.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\hsqldbmin.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\junit.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\xerces.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\wsdl4j-1.5.1.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\saaj.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\mail.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\log4j-1.2.8.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\jaxrpc.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\commons-logging-1.0.4.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\commons-discovery-0.2.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\commons-daemon.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\axis.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\axis-ant.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\activation.jar
> -Djtss.tsp.ini.file=C:\PROGRA~1\jTSS\soap\..\lib\ini\jtss_tsp.ini
> -Djtss.tcs.ini.file=C:\PROGRA~1\jTSS\soap\..\lib\ini\jtss_tcs.ini
> iaik.tc.tss.impl.java.tcs.soapservice.server.StartAxisServerWindows
>
> I copied the classpath out of the service properties and I get the
> following output:
>
> 10:23:08:434 [INFO] StartAxisServerWindows::setupServer (81):
> Initializing the
>  AXIS server
> 10:23:08:512 [INFO] StartAxisServerWindows::setupServer (87):   AXIS
> server succ
> essfully initialized
> 10:23:08:730 [INFO] StartAxisServerWindows::startServer (98):   Try to
> start the
>  AXIS server
> 10:23:08:730 [INFO] StartAxisServerWindows::startServer (101):  AXIS
> server succ
> essfully started
> - starting up SimpleAxisServer on port 30004 (C:\Program Files\jTSS\lib)
>
>
> However, when I run jtt I get the following:
>   ---------------------
>    IAIK Java TPM Tools
>   ---------------------
> 10:32:16:878 [ERROR] TcTcsBindingSoap::connect (116):   There seems no TCS
> runni
> ng
> 10:32:16:893 [ERROR] TcTcsBindingSoap::connect (116):   There seems no TCS
> runni
> ng
> iaik.tc.tss.api.exceptions.tsp.TcTspException:
>
> TSS Error:
> error layer:                0x3000 (TSP)
> error code (without layer): 0x0103
> error code (full):          0x3103
> error message: Core Service connection failed.
>
>         at
> iaik.tc.tss.impl.java.tsp.tcsbinding.soapservice.TcTcsBindingSoap.con
> nect(TcTcsBindingSoap.java:117)
>         at
> iaik.tc.tss.impl.java.tsp.internal.TcTspInternal.TspContextConnect_In
> ternal(TcTspInternal.java:368)
>         at iaik.tc.tss.impl.java.tsp.TcContext.connect(TcContext.java:174)
>         at iaik.tc.apps.jtt.tpm.TpmVersion.execute(TpmVersion.java:68)
>         at iaik.tc.utils.cmdline.SubCommand.run(SubCommand.java:69)
>         at
> iaik.tc.utils.cmdline.SubCommandParser.parse(SubCommandParser.java:41
> )
>         at iaik.tc.apps.JTpmTools.main(JTpmTools.java:224)
>
> I've noticed the same behavior when running the daemon on linux.
>

Re: [Trustedjava-support] (Windows) Running the TCS daemon directly without installing the service?

[Matthew G. <mat...@gm...>]

Ronald,

Thanks for the assistance, I was able to run this directly from a
directory without preinstalling java or jtss and was successful with
what I needed to do.

I am running this also from Win PE, and when I get a TcTddlVista error
saying that it could not load the native 32bit windows DLL, either
from path or jar, which DLL is it speaking of? Is this the VCRedist,
or something else? The same package works great on a regular windows
install, and fails like that in Win PE (JTSS Daemon works great in
both instances, jTpmTools fails in PE with the DLL issue.) I will try
and remaster a PE disc with both redist packages present and see if
that helps the issue.


Thanks!

-Matt

>Hello Matthew,
>
>Good to see that your are using jTSS for a serious deployment.
>
>First of all, jTSS setup does offer a /verysilent flag (see also
>http://www.jrsoftware.org/ishelp/index.php?topic=setupcmdline )
>in case you just want to automate the installation instead.
>
>Second, if you want to do this manually roughly follow these steps:
>0. You need to be Administrator
>1. install (silently) the Visual C++ runtime from the /lib folder, for
>both 32 and 64 bits (jTSS will dynamically decide, depending on the Java
>VM).
>2. Configure the two INI files to use what we call "Local Bindings". See
>http://trustedjava.sourceforge.net/index.php?item=jtss/readme sec. 4.1
>3. Configure the Classpath of jtt to include all the jtss stuff (you can
>skip the SOAP libraries, but they won't hurt) and the ini file definitions.
>4. Run jtt.
>
>I hope this helps.
>
>I am not sure about your Linux comment, though and would need more data.
>
>Ronald
>
>
>On 07/01/2014 10:08 PM, Matthew Galligan wrote:
>> Hello,
>>
>> I have a use case where I need to do a one-time encryption of
>> something on a lot of workstations (2000+) and was hoping to run the
>> TCS daemon directly from command line for this so that I could avoid
>> permanently installing jTSS on all of these machines. I periodically
>> boot to another partition on these machines that has jTSS installed.
>>
>> In Windows, I have run the following (wild guess so probably pretty
>> wrong):
>>
>> java -cp
> .;C:\PROGRA~1\jTSS\soap\..\lib\iaik_jtss_tsp_tests.jar;C:\PROGRA~1\jTSS\soap\..\lib\iaik_jtss_tsp_soap.jar;C:\PROGRA~1\jTSS\soap\..\lib\iaik_jtss_tsp.jar;C:\PROGRA~1\jTSS\soap\..\lib\iaik_jtss_tcs_soap.jar;C:\PROGRA~1\jTSS\soap\..\lib\iaik_jtss_tcs.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\hsqldbmin.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\junit.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\xerces.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\wsdl4j-1.5.1.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\saaj.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\mail.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\log4j-1.2.8.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\jaxrpc.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\commons-logging-1.0.4.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\commons-discovery-0.2.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\commons-daemon.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\axis.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\axis-ant.>jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\activation.jar
>> -Djtss.tsp.ini.file=C:\PROGRA~1\jTSS\soap\..\lib\ini\jtss_tsp.ini
>> -Djtss.tcs.ini.file=C:\PROGRA~1\jTSS\soap\..\lib\ini\jtss_tcs.ini
>> iaik.tc.tss.impl.java.tcs.soapservice.server.StartAxisServerWindows
>>
>> I copied the classpath out of the service properties and I get the
>> following output:
>>
>> 10:23:08:434 [INFO] StartAxisServerWindows::setupServer (81):
>> Initializing the
>>  AXIS server
>> 10:23:08:512 [INFO] StartAxisServerWindows::setupServer (87):   AXIS
>> server succ
>> essfully initialized
>> 10:23:08:730 [INFO] StartAxisServerWindows::startServer (98):   Try to
>> start the
>>  AXIS server
>> 10:23:08:730 [INFO] StartAxisServerWindows::startServer (101):  AXIS
>> server succ
>> essfully started
>> - starting up SimpleAxisServer on port 30004 (C:\Program Files\jTSS\lib)
>>
>>
>> However, when I run jtt I get the following:
>>   ---------------------
>>    IAIK Java TPM Tools
>>   ---------------------
>> 10:32:16:878 [ERROR] TcTcsBindingSoap::connect (116): There seems no
>> TCS runni
>> ng
>> 10:32:16:893 [ERROR] TcTcsBindingSoap::connect (116): There seems no
>> TCS runni
>> ng
>> iaik.tc.tss.api.exceptions.tsp.TcTspException:
>>
>> TSS Error:
>> error layer:                0x3000 (TSP)
>> error code (without layer): 0x0103
>> error code (full):          0x3103
>> error message: Core Service connection failed.
>>
>>         at
>> iaik.tc.tss.impl.java.tsp.tcsbinding.soapservice.TcTcsBindingSoap.con
>> nect(TcTcsBindingSoap.java:117)
>>         at
>> iaik.tc.tss.impl.java.tsp.internal.TcTspInternal.TspContextConnect_In
>> ternal(TcTspInternal.java:368)
>>         at iaik.tc.tss.impl.java.tsp.TcContext.connect(TcContext.java:174)
>>         at iaik.tc.apps.jtt.tpm.TpmVersion.execute(TpmVersion.java:68)
>>         at iaik.tc.utils.cmdline.SubCommand.run(SubCommand.java:69)
>>         at
>> iaik.tc.utils.cmdline.SubCommandParser.parse(SubCommandParser.java:41
>> )
>>         at iaik.tc.apps.JTpmTools.main(JTpmTools.java:224)
>>
>> I've noticed the same behavior when running the daemon on linux.
>>
>>
>> ------------------------------------------------------------------------------
>> Open source business process management suite built on Java and Eclipse
>> Turn processes into business applications with Bonita BPM Community Edition
>> Quickly connect people, data, and systems into organized workflows
>> Winner of BOSSIE, CODIE, OW2 and Gartner awards
>> http://p.sf.net/sfu/Bonitasoft
>>
>>
>> _______________________________________________
>> Trustedjava-support mailing list
>> Trustedjava-support@...
>> https://lists.sourceforge.net/lists/listinfo/trustedjava-support

Re: [Trustedjava-support] (Windows) Running the TCS daemon directly without installing the service?

[Ronald T. <ron...@ia...>]

Hello Matthew,

Good to see that your are using jTSS for a serious deployment.

First of all, jTSS setup does offer a /verysilent flag (see also 
http://www.jrsoftware.org/ishelp/index.php?topic=setupcmdline )
in case you just want to automate the installation instead.

Second, if you want to do this manually roughly follow these steps:
0. You need to be Administrator
1. install (silently) the Visual C++ runtime from the /lib folder, for 
both 32 and 64 bits (jTSS will dynamically decide, depending on the Java 
VM).
2. Configure the two INI files to use what we call "Local Bindings". See 
http://trustedjava.sourceforge.net/index.php?item=jtss/readme sec. 4.1
3. Configure the Classpath of jtt to include all the jtss stuff (you can 
skip the SOAP libraries, but they won't hurt) and the ini file definitions.
4. Run jtt.

I hope this helps.

I am not sure about your Linux comment, though and would need more data.

Ronald


On 07/01/2014 10:08 PM, Matthew Galligan wrote:
> Hello,
>
> I have a use case where I need to do a one-time encryption of 
> something on a lot of workstations (2000+) and was hoping to run the 
> TCS daemon directly from command line for this so that I could avoid 
> permanently installing jTSS on all of these machines. I periodically 
> boot to another partition on these machines that has jTSS installed.
>
> In Windows, I have run the following (wild guess so probably pretty 
> wrong):
>
> java -cp 
> .;C:\PROGRA~1\jTSS\soap\..\lib\iaik_jtss_tsp_tests.jar;C:\PROGRA~1\jTSS\soap\..\lib\iaik_jtss_tsp_soap.jar;C:\PROGRA~1\jTSS\soap\..\lib\iaik_jtss_tsp.jar;C:\PROGRA~1\jTSS\soap\..\lib\iaik_jtss_tcs_soap.jar;C:\PROGRA~1\jTSS\soap\..\lib\iaik_jtss_tcs.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\hsqldbmin.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\junit.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\xerces.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\wsdl4j-1.5.1.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\saaj.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\mail.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\log4j-1.2.8.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\jaxrpc.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\commons-logging-1.0.4.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\commons-discovery-0.2.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\commons-daemon.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\axis.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\axis-ant.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\activation.jar 
> -Djtss.tsp.ini.file=C:\PROGRA~1\jTSS\soap\..\lib\ini\jtss_tsp.ini 
> -Djtss.tcs.ini.file=C:\PROGRA~1\jTSS\soap\..\lib\ini\jtss_tcs.ini 
> iaik.tc.tss.impl.java.tcs.soapservice.server.StartAxisServerWindows
>
> I copied the classpath out of the service properties and I get the 
> following output:
>
> 10:23:08:434 [INFO] StartAxisServerWindows::setupServer (81):   
> Initializing the
>  AXIS server
> 10:23:08:512 [INFO] StartAxisServerWindows::setupServer (87):   AXIS 
> server succ
> essfully initialized
> 10:23:08:730 [INFO] StartAxisServerWindows::startServer (98):   Try to 
> start the
>  AXIS server
> 10:23:08:730 [INFO] StartAxisServerWindows::startServer (101):  AXIS 
> server succ
> essfully started
> - starting up SimpleAxisServer on port 30004 (C:\Program Files\jTSS\lib)
>
>
> However, when I run jtt I get the following:
>   ---------------------
>    IAIK Java TPM Tools
>   ---------------------
> 10:32:16:878 [ERROR] TcTcsBindingSoap::connect (116): There seems no 
> TCS runni
> ng
> 10:32:16:893 [ERROR] TcTcsBindingSoap::connect (116): There seems no 
> TCS runni
> ng
> iaik.tc.tss.api.exceptions.tsp.TcTspException:
>
> TSS Error:
> error layer:                0x3000 (TSP)
> error code (without layer): 0x0103
> error code (full):          0x3103
> error message: Core Service connection failed.
>
>         at 
> iaik.tc.tss.impl.java.tsp.tcsbinding.soapservice.TcTcsBindingSoap.con
> nect(TcTcsBindingSoap.java:117)
>         at 
> iaik.tc.tss.impl.java.tsp.internal.TcTspInternal.TspContextConnect_In
> ternal(TcTspInternal.java:368)
>         at iaik.tc.tss.impl.java.tsp.TcContext.connect(TcContext.java:174)
>         at iaik.tc.apps.jtt.tpm.TpmVersion.execute(TpmVersion.java:68)
>         at iaik.tc.utils.cmdline.SubCommand.run(SubCommand.java:69)
>         at 
> iaik.tc.utils.cmdline.SubCommandParser.parse(SubCommandParser.java:41
> )
>         at iaik.tc.apps.JTpmTools.main(JTpmTools.java:224)
>
> I've noticed the same behavior when running the daemon on linux.
>
>
> ------------------------------------------------------------------------------
> Open source business process management suite built on Java and Eclipse
> Turn processes into business applications with Bonita BPM Community Edition
> Quickly connect people, data, and systems into organized workflows
> Winner of BOSSIE, CODIE, OW2 and Gartner awards
> http://p.sf.net/sfu/Bonitasoft
>
>
> _______________________________________________
> Trustedjava-support mailing list
> Tru...@li...
> https://lists.sourceforge.net/lists/listinfo/trustedjava-support


-- 
Dr. Ronald Tögl                 phone +43 316/873-5502
Secure and Correct Systems      fax   +43 316/873-5520
IAIK                            ron...@ia...
Graz University of Technology   http://www.iaik.tugraz.at

[Trustedjava-support] (Windows) Running the TCS daemon directly without installing the service?

[Matthew G. <mat...@gm...>]

Hello,

I have a use case where I need to do a one-time encryption of something on
a lot of workstations (2000+) and was hoping to run the TCS daemon directly
from command line for this so that I could avoid permanently installing
jTSS on all of these machines. I periodically boot to another partition on
these machines that has jTSS installed.

In Windows, I have run the following (wild guess so probably pretty wrong):

java -cp
.;C:\PROGRA~1\jTSS\soap\..\lib\iaik_jtss_tsp_tests.jar;C:\PROGRA~1\jTSS\soap\..\lib\iaik_jtss_tsp_soap.jar;C:\PROGRA~1\jTSS\soap\..\lib\iaik_jtss_tsp.jar;C:\PROGRA~1\jTSS\soap\..\lib\iaik_jtss_tcs_soap.jar;C:\PROGRA~1\jTSS\soap\..\lib\iaik_jtss_tcs.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\hsqldbmin.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\junit.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\xerces.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\wsdl4j-1.5.1.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\saaj.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\mail.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\log4j-1.2.8.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\jaxrpc.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\commons-logging-1.0.4.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\commons-discovery-0.2.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\commons-daemon.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\axis.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\axis-ant.jar;C:\PROGRA~1\jTSS\soap\..\ext_libs\activation.jar
-Djtss.tsp.ini.file=C:\PROGRA~1\jTSS\soap\..\lib\ini\jtss_tsp.ini
-Djtss.tcs.ini.file=C:\PROGRA~1\jTSS\soap\..\lib\ini\jtss_tcs.ini
iaik.tc.tss.impl.java.tcs.soapservice.server.StartAxisServerWindows

I copied the classpath out of the service properties and I get the
following output:

10:23:08:434 [INFO] StartAxisServerWindows::setupServer (81):
Initializing the
 AXIS server
10:23:08:512 [INFO] StartAxisServerWindows::setupServer (87):   AXIS server
succ
essfully initialized
10:23:08:730 [INFO] StartAxisServerWindows::startServer (98):   Try to
start the
 AXIS server
10:23:08:730 [INFO] StartAxisServerWindows::startServer (101):  AXIS server
succ
essfully started
- starting up SimpleAxisServer on port 30004 (C:\Program Files\jTSS\lib)


However, when I run jtt I get the following:
  ---------------------
   IAIK Java TPM Tools
  ---------------------
10:32:16:878 [ERROR] TcTcsBindingSoap::connect (116):   There seems no TCS
runni
ng
10:32:16:893 [ERROR] TcTcsBindingSoap::connect (116):   There seems no TCS
runni
ng
iaik.tc.tss.api.exceptions.tsp.TcTspException:

TSS Error:
error layer:                0x3000 (TSP)
error code (without layer): 0x0103
error code (full):          0x3103
error message: Core Service connection failed.

        at
iaik.tc.tss.impl.java.tsp.tcsbinding.soapservice.TcTcsBindingSoap.con
nect(TcTcsBindingSoap.java:117)
        at
iaik.tc.tss.impl.java.tsp.internal.TcTspInternal.TspContextConnect_In
ternal(TcTspInternal.java:368)
        at iaik.tc.tss.impl.java.tsp.TcContext.connect(TcContext.java:174)
        at iaik.tc.apps.jtt.tpm.TpmVersion.execute(TpmVersion.java:68)
        at iaik.tc.utils.cmdline.SubCommand.run(SubCommand.java:69)
        at
iaik.tc.utils.cmdline.SubCommandParser.parse(SubCommandParser.java:41
)
        at iaik.tc.apps.JTpmTools.main(JTpmTools.java:224)

I've noticed the same behavior when running the daemon on linux.

Re: [Trustedjava-support] Sensitivity of keyblob file created by jtt create_key?

[Ronald T. <ron...@ia...>]

Oh, forgot to answer your main question:
Also the key blob file is protected by the same secret value tpmProof 
and the SRK, so it too cannot be decrypted by any other device.

Ronald

On 06/27/2014 10:36 AM, Ronald Tögl wrote:
> Hello Matthew,
>
> You can use TPM keys of type storage for encryption, but only through
> the "sealing" mechanism. After sealing data, there is always an
> encrypted (under the Storage Root Key), unique, TPM-private element
> included in the resulting data structure.
> The sealed data can thus only be decrypted by the very same TPM that
> performed the encryption operation and no-one else. Not even through
> backup or vendor-maintenance mechanisms.
>
> If you need to encrypt data on any other machine, and decrypt on a
> specific TPM (with PCR states), you can use the Binding scheme instead.
>
> Best,
> Ronald
>
>
> On 06/26/2014 08:15 PM, Matthew Galligan wrote:
>> Hello,
>>
>> I was wondering, if I create a storage key with e.g.
>>> jtt create_key -t storage --keyblob my.key -p 1,2,3,4,5
>> is that key file encrypted/tied to the current TPM in any way, or can
>> another machine use this key to decrypt a file I seal with it?
>>
>> Thanks!
>> -Matt
>>
>


-- 
Dr. Ronald Tögl                 phone +43 316/873-5502
Secure and Correct Systems      fax   +43 316/873-5520
IAIK                            ron...@ia...
Graz University of Technology   http://www.iaik.tugraz.at

Re: [Trustedjava-support] Sensitivity of keyblob file created by jtt create_key?

[Ronald T. <ron...@ia...>]

Hello Matthew,

You can use TPM keys of type storage for encryption, but only through 
the "sealing" mechanism. After sealing data, there is always an 
encrypted (under the Storage Root Key), unique, TPM-private element 
included in the resulting data structure.
The sealed data can thus only be decrypted by the very same TPM that 
performed the encryption operation and no-one else. Not even through 
backup or vendor-maintenance mechanisms.

If you need to encrypt data on any other machine, and decrypt on a 
specific TPM (with PCR states), you can use the Binding scheme instead.

Best,
Ronald


On 06/26/2014 08:15 PM, Matthew Galligan wrote:
> Hello,
>
> I was wondering, if I create a storage key with e.g.
> >jtt create_key -t storage --keyblob my.key -p 1,2,3,4,5
> is that key file encrypted/tied to the current TPM in any way, or can 
> another machine use this key to decrypt a file I seal with it?
>
> Thanks!
> -Matt
>


-- 
Dr. Ronald Tögl                 phone +43 316/873-5502
Secure and Correct Systems      fax   +43 316/873-5520
IAIK                            ron...@ia...
Graz University of Technology   http://www.iaik.tugraz.at

[Trustedjava-support] Sensitivity of keyblob file created by jtt create_key?

[Matthew G. <mat...@gm...>]

Hello,

I was wondering, if I create a storage key with e.g.
>jtt create_key -t storage --keyblob my.key -p 1,2,3,4,5
is that key file encrypted/tied to the current TPM in any way, or can
another machine use this key to decrypt a file I seal with it?

Thanks!
-Matt

Re: [Trustedjava-support] PCR bound key with TPM Emulator

[Ronald T. <ron...@ia...>]

Dear Javier,

Apparently there has been a bug in there. It might have been fixed in 
the meantime though.
I guess you would need to try out.

BTW, the IBM Emulator might be slightly closer to the spec.

Best,
Ronald


On 05/29/2014 12:36 PM, Javier Espinar wrote:
> Dear all,
>
> I am using the TPM Emulator to create a PCR bound key.
> I saw this code in 
> /jTSS_src/src/iaik/tc/tss/test/tsp/java/keys/TestKeys.java
>
> if (tpmManufactuerIs(TPM_MAN_ETHZ))
> {
>   Log.info("Skipping test case creating PCR bound key on TPM emulator.");
>   return;
> }
>
> Does it means that the TPM Emulator does not support this functionality?
>
> Thank you very much,
> Regards
> Javi
>
>
> ------------------------------------------------------------------------------
> Time is money. Stop wasting it! Get your web API in 5 minutes.
> www.restlet.com/download
> http://p.sf.net/sfu/restlet
>
>
> _______________________________________________
> Trustedjava-support mailing list
> Tru...@li...
> https://lists.sourceforge.net/lists/listinfo/trustedjava-support


-- 
Dr. Ronald Tögl                 phone +43 316/873-5502
Secure and Correct Systems      fax   +43 316/873-5520
IAIK                            ron...@ia...
Graz University of Technology   http://www.iaik.tugraz.at

[Trustedjava-support] PCR bound key with TPM Emulator

[Javier E. <jav...@gm...>]

 Dear all,

I am using the TPM Emulator to create a PCR bound key.
I saw this code in
/jTSS_src/src/iaik/tc/tss/test/tsp/java/keys/TestKeys.java

if (tpmManufactuerIs(TPM_MAN_ETHZ))
{
  Log.info("Skipping test case creating PCR bound key on TPM emulator.");
  return;
}

Does it means that the TPM Emulator does not support this functionality?

Thank you very much,
Regards
Javi

Re: [Trustedjava-support] FW: Generate SOAP Jars Problem

[Ronald T. <ron...@ia...>]

Hello,

This is probably a version issue (too old) with the JUNIT library used 
in your ANT environment.

Best regards,
Ronald

Am 05.03.2014 21:17, schrieb ???:
>
>
> Dear all,
> I was following the instructions in the TrustJava Website to configure 
> the SOAP build of jTSS.
>
> When I reached step7.6 generate SOAP Jars, I got the following error 
> message:
>
> They are similar issues like:
>
>     [javac]   location: class TestEventLog
>     [javac] 
> /home/dou/jTSS_0.7.1/src/jtss_tsp/src_tests/iaik/tc/tss/test/tsp/java/pcrs/TestEventLog.java:253: 
> error: cannot find symbol
>     [javac]             assertTrue("logging event failed", false);
>     [javac]             ^
>     [javac]   symbol:   method assertTrue(String,boolean)
>     [javac]   location: class TestEventLog
>     [javac] 
> /home/dou/jTSS_0.7.1/src/jtss_tsp/src_tests/iaik/tc/tss/test/tsp/java/pcrs/TestPcrs.java:75: 
> error: cannot find symbol
>     [javac] assertTrue("testPcrExtendAndReadWithoutEvent failed", false);
>     [javac]             ^
>     [javac]   symbol:   method assertTrue(String,boolean)
>     [javac]   location: class TestPcrs
>     [javac] 
> /home/dou/jTSS_0.7.1/src/jtss_tsp/src_tests/iaik/tc/tss/test/tsp/java/pcrs/TestPcrs.java:112: 
> error: cannot find symbol
>     [javac]                 assertTrue("PCR content after extend is 
> still zero.", false);
>     [javac]                 ^
>     [javac]   symbol:   method assertTrue(String,boolean)
>     [javac]   location: class TestPcrs
>     [javac] 
> /home/dou/jTSS_0.7.1/src/jtss_tsp/src_tests/iaik/tc/tss/test/tsp/java/pcrs/TestPcrs.java:124: 
> error: cannot find symbol
>     [javac]                 assertTrue("PCR reset failed.", false);
>     [javac]                 ^
>     [javac]   symbol:   method assertTrue(String,boolean)
>     [javac]   location: class TestPcrs
>     [javac] 
> /home/dou/jTSS_0.7.1/src/jtss_tsp/src_tests/iaik/tc/tss/test/tsp/java/pcrs/TestPcrs.java:131: 
> error: cannot find symbol
>     [javac] assertTrue("testPcrExtendAndReadWithoutEvent failed", false);
>     [javac]             ^
>     [javac]   symbol:   method assertTrue(String,boolean)
>     [javac]   location: class TestPcrs
>     [javac] Note: 
> /home/dou/jTSS_0.7.1/src/jtss_tsp/src_tests/iaik/tc/tss/test/tsp/java/simple/TestWinDenyCommand.java 
> uses or overrides a deprecated API.
>     [javac] Note: Recompile with -Xlint:deprecation for details.
>     [javac] 100 errors
>     [javac] 1 warning
>
>
> Total time: 0 seconds
>
>
> Can anyone help me with this?  Thanks!
>
>
>
> ------------------------------------------------------------------------------
> Subversion Kills Productivity. Get off Subversion & Make the Move to Perforce.
> With Perforce, you get hassle-free workflows. Merge that actually works.
> Faster operations. Version large binaries.  Built-in WAN optimization and the
> freedom to use Git, Perforce or both. Make the move to Perforce.
> http://pubads.g.doubleclick.net/gampad/clk?id=122218951&iu=/4140/ostg.clktrk
>
>
> _______________________________________________
> Trustedjava-support mailing list
> Tru...@li...
> https://lists.sourceforge.net/lists/listinfo/trustedjava-support

[Trustedjava-support] Add JTss into Ant project in Eclipse

[窦佐超 <dou...@ho...>]

Dear All,
Does anyone know how to add jTSS packets into an Ant Project in Eclipse?  Thank you very much!
 		 	   		  

[Trustedjava-support] FW: Generate SOAP Jars Problem

[窦佐超 <dou...@ho...>]

Dear all,
I was following the instructions in the TrustJava Website to configure the SOAP build of jTSS.

When I reached step7.6 generate SOAP Jars, I got the following error message:

They are similar issues like:

    [javac]   location: class TestEventLog
    [javac] /home/dou/jTSS_0.7.1/src/jtss_tsp/src_tests/iaik/tc/tss/test/tsp/java/pcrs/TestEventLog.java:253: error: cannot find symbol
    [javac]             assertTrue("logging event failed", false);
    [javac]             ^
    [javac]   symbol:   method assertTrue(String,boolean)
    [javac]   location: class TestEventLog
    [javac] /home/dou/jTSS_0.7.1/src/jtss_tsp/src_tests/iaik/tc/tss/test/tsp/java/pcrs/TestPcrs.java:75: error: cannot find symbol
    [javac]             assertTrue("testPcrExtendAndReadWithoutEvent failed", false);
    [javac]             ^
    [javac]   symbol:   method assertTrue(String,boolean)
    [javac]   location: class TestPcrs
    [javac] /home/dou/jTSS_0.7.1/src/jtss_tsp/src_tests/iaik/tc/tss/test/tsp/java/pcrs/TestPcrs.java:112: error: cannot find symbol
    [javac]                 assertTrue("PCR content after extend is still zero.", false);
    [javac]                 ^
    [javac]   symbol:   method assertTrue(String,boolean)
    [javac]   location: class TestPcrs
    [javac] /home/dou/jTSS_0.7.1/src/jtss_tsp/src_tests/iaik/tc/tss/test/tsp/java/pcrs/TestPcrs.java:124: error: cannot find symbol
    [javac]                 assertTrue("PCR reset failed.", false);
    [javac]                 ^
    [javac]   symbol:   method assertTrue(String,boolean)
    [javac]   location: class TestPcrs
    [javac] /home/dou/jTSS_0.7.1/src/jtss_tsp/src_tests/iaik/tc/tss/test/tsp/java/pcrs/TestPcrs.java:131: error: cannot find symbol
    [javac]             assertTrue("testPcrExtendAndReadWithoutEvent failed", false);
    [javac]             ^
    [javac]   symbol:   method assertTrue(String,boolean)
    [javac]   location: class TestPcrs
    [javac] Note: /home/dou/jTSS_0.7.1/src/jtss_tsp/src_tests/iaik/tc/tss/test/tsp/java/simple/TestWinDenyCommand.java uses or overrides a deprecated API.
    [javac] Note: Recompile with -Xlint:deprecation for details.
    [javac] 100 errors
    [javac] 1 warning


Total time: 0 seconds


Can anyone help me with this?  Thanks!

 		 	   		   		 	   		  

Re: [Trustedjava-support] Generate SOAP Jars Problem

[Ronald T. <ron...@ia...>]

Hello,

Just create a version.txt file there, with a single line saying for instance
0.7.1-dou


Ronald

On 02/27/2014 11:13 PM, ??? wrote:
> Dear all,
> I was following the instructions in the TrustJava Website to configure 
> the SOAP build of jTSS.
>
> When I reached step7.6 generate SOAP Jars, I got the following error 
> message:
>
>
> Buildfile: /home/dou/jTSS_0.7.1/src/build.xml
>
> BUILD FAILED
> /home/dou/jTSS_0.7.1/src/build.xml:102: 
> /home/dou/jTSS_0.7.1/src/version.txt doesn't exist
>
> Total time: 0 seconds
>
>
> Can anyone help me with this?  Thanks!
>
>
>
> ------------------------------------------------------------------------------
> Flow-based real-time traffic analytics software. Cisco certified tool.
> Monitor traffic, SLAs, QoS, Medianet, WAAS etc. with NetFlow Analyzer
> Customize your own dashboards, set traffic alerts and generate reports.
> Network behavioral analysis & security monitoring. All-in-one tool.
> http://pubads.g.doubleclick.net/gampad/clk?id=126839071&iu=/4140/ostg.clktrk
>
>
> _______________________________________________
> Trustedjava-support mailing list
> Tru...@li...
> https://lists.sourceforge.net/lists/listinfo/trustedjava-support


-- 
Dr. Ronald Tögl                 phone +43 316/873-5502
Secure and Correct Systems      fax   +43 316/873-5520
IAIK                            ron...@ia...
Graz University of Technology   http://www.iaik.tugraz.at

[Trustedjava-support] Generate SOAP Jars Problem

[窦佐超 <dou...@ho...>]

Dear all,
I was following the instructions in the TrustJava Website to configure the SOAP build of jTSS.

When I reached step7.6 generate SOAP Jars, I got the following error message:


Buildfile: /home/dou/jTSS_0.7.1/src/build.xml

BUILD FAILED
/home/dou/jTSS_0.7.1/src/build.xml:102: /home/dou/jTSS_0.7.1/src/version.txt doesn't exist

Total time: 0 seconds


Can anyone help me with this?  Thanks!

 		 	   		  

[Trustedjava-support] Christmas Surprise: jTSS 0.7.1

[Ronald T. <ron...@ia...>]

Dear trustedJava community,

There is a fresh maintenance release for jTSS available, incorporating 
mostly bugfixes.
Enjoy it today from http://trustedjava.sf.net

Ronald

-- 
Dr. Ronald Tögl                 phone +43 316/873-5502
Secure and Correct Systems      fax   +43 316/873-5520
IAI...@ia...
Graz University of Technologyhttp://www.iaik.tugraz.at

Re: [Trustedjava-support] PCR information could not be interpreted

[Martin P. <Mar...@ia...>]

Hi...

On 2013-08-15 07:36, Toqeer Ali wrote:
> Platform: Lenovo X200 with iTPM
>  sudo ./jtt.sh quote --aik aik.tpmkey --auth mysecret -p 1
> error message: PCR information could not be interpreted
> If someone can give the idea where could be the problem.


Intel TPMs are strange sometimes.
We tested jTSS against a iTPM and had to implement some workarounds in jTSS code.
One of these you can find in TcPcrCompositeInfo.java, please read the
comment in function getNumPcrs().
We also tried a quote with just PCR 1 set... :-)

HTH,
Martin

Re: [Trustedjava-support] Bug in iaik.tc.tss.api.structs.pcclient.TcTcgPcclientStoredCert

[Ronald T. <ron...@ia...>]

Hi Mike,

Thanks for pointing this out.

Ronald

Am 13.08.2013 03:02, schrieb Michael StJohns:
> Hi -
>
> There's a problem with the subject class - specifically in the
> encoding.  The certLength is (improperly) encoded in 32 bits - it should
> be 16.  The decode function is correct.
>
> The bug is in "getEncoded" at around line 114.
>
> Mike
>
>
> ------------------------------------------------------------------------------ 
>
> Get 100% visibility into Java/.NET code with AppDynamics Lite!
> It's a free troubleshooting tool designed for production.
> Get down to code-level detail for bottlenecks, with <2% overhead.
> Download for free and get started troubleshooting in minutes.
> http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk 
>
> _______________________________________________
> Trustedjava-support mailing list
> Tru...@li...
> https://lists.sourceforge.net/lists/listinfo/trustedjava-support

[Trustedjava-support] PCR information could not be interpreted

[Toqeer A. <toq...@gm...>]

Hi,

I have some problem while executing the quote command, following are the
details.

Platform Information

Platform: Lenovo X200 with iTPM
OS:        Ubuntu 12.04
jTSS Version:      0.7a
jTpmTools Version:   0.7a

Descripotion: previously AIK has been created using the following command
with no problem, also other commands can be executed on TPM like PCR read
etc.

$sudo ./jtt.sh aik_create -a mysecret -l aiktest1 -o mysecret

*Problem*:
I am executing the following quote command

 sudo ./jtt.sh quote --aik aik.tpmkey --auth mysecret -p 1

Which gives the following error

  ---------------------
   IAIK Java TPM Tools
  ---------------------

12:32:31:151 [INFO] TcTddl::<clinit> (55):    Unable to instantiate TDDL
implementation (). Check the TCS configuration file.
12:32:31:154 [INFO] TcTddlLinux::<init> (53):    Found no TPM device
configuration in ini file. Will later attempt auto-detection.
12:32:31:361 [INFO] TcTcsi::<clinit> (161):    Unable to instantiate system
persistent storage (null). Disabling system persistent storage.
12:32:31:362 [INFO] TcTcsi::<clinit> (181):    Unable to instantiate TCS
event log (null). Check the TCS configuration file.
12:32:31:714 [INFO] Quote::execute (70):    Including PCR 1 in the quote
iaik.tc.tss.api.exceptions.tcs.TcTpmException:

TSS Error:
error layer:                0x00 (TPM)
error code (without layer): 0x10
error code (full):          0x10
error message: PCR information could not be interpreted

    at
iaik.tc.tss.impl.java.tcs.pbg.TcTpmCmdCommon.handleRetCode(TcTpmCmdCommon.java:73)
    at
iaik.tc.tss.impl.java.tcs.pbg.TcTpmCmdIntegrity.TpmQuote(TcTpmCmdIntegrity.java:162)
    at iaik.tc.tss.impl.java.tcs.tcsi.TcTcsi.TcsipQuote(TcTcsi.java:2561)
    at
iaik.tc.tss.impl.java.tsp.tcsbinding.local.TcTcsBindingLocal.TcsipQuote(TcTcsBindingLocal.java:702)
    at
iaik.tc.tss.impl.java.tsp.internal.TcTspInternal.TspQuote_Internal(TcTspInternal.java:3768)
    at iaik.tc.tss.impl.java.tsp.TcTpm.quote(TcTpm.java:1433)
    at iaik.tc.apps.jtt.aik.Quote.execute(Quote.java:117)
    at iaik.tc.utils.cmdline.SubCommand.run(SubCommand.java:69)
    at
iaik.tc.utils.cmdline.SubCommandParser.parse(SubCommandParser.java:41)
    at iaik.tc.apps.JTpmTools.main(JTpmTools.java:224)

12:32:33:090 [ERROR] JTpmTools::main (235):    application exits with
error:

TSS Error:
error layer:                0x00 (TPM)
error code (without layer): 0x10
error code (full):          0x10
error message:
**



PCR information could not be interpreted
 (return: -1)


If someone can give the idea where could be the problem.


Regards

-- 
Toqeer Ali Syed

Red Hat Certified Engineer

mob:     +60102519502
mob:     +92 321 9059916

[Trustedjava-support] Bug in iaik.tc.tss.api.structs.pcclient.TcTcgPcclientStoredCert

[Michael S. <ms...@nt...>]

Hi -

There's a problem with the subject class - specifically in the 
encoding.  The certLength is (improperly) encoded in 32 bits - it should 
be 16.  The decode function is correct.

The bug is in "getEncoded" at around line 114.

Mike

[Trustedjava-support] WIMA USA Early Bird Registration is now open!

[Joanna M. v. L. <me...@li...>]

LinkedIn
------------
Joanna Merchie has sent you a message

Date: 7/31/2013
Subject: WIMA USA Early Bird Registration is now open!

Hi,

Just a quick note to let you know that the WIMA USA 2013 NFC & Proximity Solutions (October 28-30, San Francisco) Attendee Registration is now open!

So be an Early Bird and benefit from 20% discount on our Full Access Passes until September 13th: prices starting from 300€ (Approx. $390)!

To take advantage of this offer or discover what is included in our great value all inclusive pass go on: www.wima.mc/usa/2734-registration and enter the code: EBUS13 or contact      d.f...@wi... for more information.

For its 3rd US edition, WIMA is evolving to include new market segments – continuing to offer participants the best of NFC while introducing complementary proximity based technologies such as QR, Bluetooth and more!

This enhanced and evolved new concept for WIMA, offers a wider variety of tools for vertical markets such as mobile commerce, mobile marketing, transport, healthcare, access-control, consumer electronics and more.

Join us for the Pre-Conference Day track on Monday October 28th to gain first hand knowledge on how proximity technologies can be used for new interactive mobile experiences to leverage customer engagement.

More networking opportunities with our new Speed Dating Session: get introduced, exchange business cards, explore opportunities of mutual interest during a 3 minutes 
one-on-one meeting  before moving on to your next blind date !

Visit our website  (http://www.wima.mc/usa/) and discover our first featured keynotes and be sure to follow our regular sponsor updates.

Looking forward to welcoming you to San Francisco!

Kind Regards,

Joanna
Executive Director WIMA USA


View/reply to this message:
http://www.linkedin.com/e/-gtoqcj-hjsjtyz5-5w/9_i0OZ70PXqrViOT94qxOaOyPo22vyAT-8JBq0w_WR-HG2A29D4svaA-ybzj/mbd/I702491707_15/?hs=false&tok=1u70MIhbkOM5Q1

Don't want to receive e-mail notifications? Adjust your message settings:
http://www.linkedin.com/e/-gtoqcj-hjsjtyz5-5w/9_i0OZ70PXqrViOT94qxOaOyPo22vyAT-8JBq0w_WR-HG2A29D4svaA-ybzj/blk/I702491707_15/s6hJbOYWrSlI/mdp/?hs=false&tok=2aVwikpZEOM5Q1


  

[Trustedjava-support] Mixed topics :-)

[Antje R. v. L. <me...@li...>]

LinkedIn
------------
Antje Rohner has sent you a message

Date: 7/15/2013
Subject: Mixed topics :-)

Hej Anders,

how is life? FINALLY we have summer.. it was horrible here in Germany. Sweden was/is so lucky with the weather this year! Do you prepare for France? Where exactly is the house? I don't think we will mange to visit you in the first week of September as we are in the Bretagne. But you never know ;-)

A question came up here and I think you are the best to answer it :-) .. my colleague Martin (FAE here in Germany) asks me what the round symbol is in the IAR logo.. well.. I don't know ;-) .. but you?

By the way.. beginning of Octonber is the 30 year party for IAR. Will you be there?

Hej då och kramar!
Antje

View/reply to this message:
http://www.linkedin.com/e/-gtoqcj-hj5dwnn4-5i/9_i0OZ70PXqrViOT94qxOaOyPo22vyAT-8JBq0w_WR-HG2A29D4svaA-ybzj/mbd/I687406495_15/?hs=false&tok=0YvbfMOJE2plQ1

Don't want to receive e-mail notifications? Adjust your message settings:
http://www.linkedin.com/e/-gtoqcj-hj5dwnn4-5i/9_i0OZ70PXqrViOT94qxOaOyPo22vyAT-8JBq0w_WR-HG2A29D4svaA-ybzj/blk/I687406495_15/s6hJbOYWrSlI/mdp/?hs=false&tok=3Tv8BEhqY2plQ1


  

Re: [Trustedjava-support] How to use jTSS developing demonstration of trusted computing?

[Ronald T. <ron...@ia...>]

Hello Liu Wei,

Please use the latest version of jTSS from trustedjava.sf.net, it 
includes a tutorial document.

Also, PCRs 1-16 are meant to be zero, unless you change them 
deliberately through the Extend operation.

Best regards,
Ronald

On 05/15/2013 10:04 AM, ? wrote:
>   may 15,2013
> Dear sir/madam,
>      I am very glad to write letter for your help.I'm a student of 
> BeiJing Institute of technology.I am developing a demonstration of
> trusted computing via TPM_emulator and jTSS recently.And now I have 
> installed the TPM_emulator and jTSS 0.6 successfully.Furthermore,
> jTSS can accesss TPM_emulator by the example 0.6.sh.But now I have 
> founed that the value of PCRs is zero.The TPM_emulator has not 
> measured anything.I want your help sincerely.I hope getting same 
> instances  for measuring and demonstrating how to developing PTS.
>  Sincer ely yours,
> !  LiuWei
>
>
>
>
> ------------------------------------------------------------------------------
> AlienVault Unified Security Management (USM) platform delivers complete
> security visibility with the essential security capabilities. Easily and
> efficiently configure, manage, and operate all of your security controls
> from a single console and one unified framework. Download a free trial.
> http://p.sf.net/sfu/alienvault_d2d
>
>
> _______________________________________________
> Trustedjava-support mailing list
> Tru...@li...
> https://lists.sourceforge.net/lists/listinfo/trustedjava-support


-- 
Dipl.-Ing. Ronald Tögl          phone +43 316/873-5502
Secure and Correct Systems      fax   +43 316/873-5520
IAIK                            ron...@ia...
Graz University of Technology   http://www.iaik.tugraz.at

[Trustedjava-support] How to use jTSS developing demonstration of trusted computing?

[柳 <liu...@12...>]

                                                                                                                                                                                          may 15,2013
Dear sir/madam,
     I am very glad to write letter for your help.I'm a student of BeiJing Institute of technology.I am developing a demonstration of 
trusted computing via TPM_emulator and jTSS recently.And now I have installed the TPM_emulator and jTSS 0.6 successfully.Furthermore,
jTSS can accesss TPM_emulator by the example 0.6.sh.But now I have founed that the value of PCRs is zero.The TPM_emulator has not measured anything.I want your help sincerely.I hope getting same instances  for measuring and demonstrating how to developing PTS. 
                                                                                          
 Sincerely yours,
 LiuWei