Jürgen Repp

@williamcroberts No there is no timeline from my side.

with your profile I could execute: `echo 123 |tss2_encrypt -p /HS/SRK -i- -o-| tss2_decrypt -p /HS/SRK -i- -o-` more than 5 times. Does the error also occur if you execute...

@GalaxyGorilla yes I also now could reproduce your error if I cut off the power between executing the decrypt command. @AndreasFuchsTPM @PeterHuewe Any ideas what's the reason for this error?

@cplappert @GalaxyGorilla Also thank you from me for the research in the spec :+1:

> Take [ownership](https://tpm2-tools.readthedocs.io/en/latest/man/tpm2_changeauth.1/#examples) of the lockout and clear the [dictionary-lockout](https://tpm2-tools.readthedocs.io/en/latest/man/tpm2_dictionarylockout.1/). An auth value for the lockout hierarchy can also be set using tss2_provision (-L, --authValueLockout=STRING) or a JSON encoded policy...

Could you please send the output of `tss2_getinfo -o -| grep PCRS -A 60` or `tpm2_pcrread` To compare the result with the pcr selection in your profile. P.S. It's not...

Thank you for sending the PCR informations. Your TPM has no sha256 bank. But only this bank is activated in the default profile. You should change it in the default...

The configuration description can be viewed with: `man fapi-profile` and `man tss2_provision`. With `tss2_getinfo` you get a list of all capabilities of your TPM. The error now, after the correct...

So perhaps you can try to clear the TPM in the bios of your laptop. But clearing erases information stored on the TPM. You will lose all created keys and...

The error produced by `tpm2_hierarchycontrol` is what I expected because I wrote you would need the auth value of the platform hierarchy to enable the endorsement hierarchy. This auth value...