Hi, >> But, I'm curious: have you - or anyone else - successfully accessed an >> SRK to decrypt a storage-key even after re-installing an OS (as long as >> the TPM was NOT reinitialized in the re-installation of the OS)? TIA.
Yes, this works fine. In this case when installing trousers just use one of the two sample system persistent storage files that comes with the trousers source in the dist directory [1]. Use system.data.noauth if your SRK was created without a password, system.data.auth if it was created with a password. > Someone please correct me if I am wrong, but as far as I can tell, the TPM > only stores EK, SRK, and (maybe) some owner-evict keys inside. The rest are That's right. > stored encrypted on the hard drive. If the OS is completely re-installed, > wouldn't that wipe out the disk area that the TPM is using the its key > storage? I couldn't find anywhere any indication that the TPM is using some > sort of "hidden" disk partition for its key storage that is not affected by > the OS. So I would think that after re-installing the OS, the on-disk key > storage would go away. Can anyone confirm that this is actually true? The TSS's on disk key storage would be wiped, but I'm sure Windows 7 is smart enough to manage its TPM keys outside of the TSS's storage. TSS key storage is of very little help to anyone because there are no OS or TPM based access controls on it. Kent [1] http://trousers.git.sourceforge.net/git/gitweb.cgi?p=trousers/trousers;a=tree;f=dist;h=e6c741cc13ae524308f34e7aa1d032163d7caa10;hb=HEAD > ------------------------------------------------------------------------------ > Special Offer -- Download ArcSight Logger for FREE! > Finally, a world-class log management solution at an even better > price-free! And you'll get a free "Love Thy Logs" t-shirt when you > download Logger. Secure your free ArcSight Logger TODAY! > http://p.sf.net/sfu/arcsisghtdev2dev > _______________________________________________ > TrouSerS-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/trousers-users > > ------------------------------------------------------------------------------ Special Offer -- Download ArcSight Logger for FREE! Finally, a world-class log management solution at an even better price-free! And you'll get a free "Love Thy Logs" t-shirt when you download Logger. Secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsisghtdev2dev _______________________________________________ TrouSerS-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/trousers-users
