Jürgen Repp

@MartinLoeper Thank you for sending the alg list. Currently tss does not support: sha3_256, sha3_384, and sha3_512 If you do not use these algs everything should work except of tss2_getinfo...

@terilenard with ESAPI you have to create a policy session with activated parameter encryption FAPI uses ESAPI for this purpose. At: https://github.com/JuergenReppSIT/tpm2-tss/blob/8e6aca9ce03c67cec7f3e6c01946d7398f816260/src/tss2-fapi/ifapi_policyutil_execute.c#L97 you can see how how FAPI does it....

After a reboot you must recreate the context files.

you should use the option `-p kali` for the command `tpm2_create` to protect the sealed data. `-P` is used to authorize the parent object.