Imran Desai comments

Results 76 comments of


                                            Imran Desai

Question on EK default auth policy and how to make EK to be used for signing operations (assume privacy is not a concern)

@danielwangksu also take a look at the scripts in this article https://tpm2-software.github.io/2020/06/12/Remote-Attestation-With-tpm2-tools.html

DA Lockout without using any Password Protection

Being locked out is an expected scenario from system robustness point of view. Take [ownership](https://tpm2-tools.readthedocs.io/en/latest/man/tpm2_changeauth.1/#examples) of the lockout and clear the [dictionary-lockout](https://tpm2-tools.readthedocs.io/en/latest/man/tpm2_dictionarylockout.1/).

tss2_provision first try fails, "Invalid PCR selection in profile"

@JuergenReppSIT Intel TPM, all versions, support sha256. Can you share the EKpublic?

tss2_provision first try fails, "Invalid PCR selection in profile"

How was the value Eny1GbQ2qCcfj-6s5wjAYdWlUgzW6wjEN4fxZXsCBlY%3D calculated? Can you email me the output from `tpm2_createek -c ek.ctx -G rsa -u ek.pub`?

tss2_provision first try fails, "Invalid PCR selection in profile"

> ral@archie:~$ tpm2_createek -c ek.ctx -G rsa -u ek.pub > info:tcti:src/tss2-tcti/tctildr.c:125:tcti_from_info() Initialized TCTI named: tcti-device > ral@archie:~$ cat ek.pub > U�S#ral@archie:~$ od -x ek.pub > 0000000 3a01 0100 0b00 0300...

tpm2_eventlog; Handle EV_IPL event in PLCR 12 for sd-boot >= 251

@berrange can you please add the eventlog binary [here](https://github.com/tpm2-software/tpm2-tools/tree/master/test/integration/fixtures) and or add a test.

tpm2_eventlog; Handle EV_IPL event in PLCR 12 for sd-boot >= 251

@berrange, is there a test that uses the yaml files included in the PR?

tools/tpm2_policycommandcode: add support for calculating cpHash

Closed with #3133

WIP - CI Multiarch

@JuergenReppSIT can you please comment on the failures in fapi tests seen [here](https://github.com/tpm2-software/tpm2-tools/runs/7796693036?check_suite_focus=true#step:5:238).

WIP - CI Multiarch

> @malikabhi05 @idesai Could you please run the tss2_provisioning of one fapi test e.g. fapi-get-random.sh with: > > ``` > ls -l */* >&2 > TSS2_LOG=fapi+trace tss2_provision > ``` >...