Thank you Kent, that worked -  I changed the second parameter to TRUE and set 
my owner password and now it's working on a local TPM.

Trying to do the same operation on the same TPM from a remote server using the 
tcsd network service, I'm now getting TPM_AUTHFAIL.

I enabled the "readpubek" remote operation in /etc/tcsd.conf and restarted tcsd.

All I'm doing to access this remotely is taking the same code which is now 
working on the local host and running it on another system, passing the IP 
address to my original host as the second parameter to Tspi_Context_Connect. 
I've used that successfully to get remote quotes.

Has anyone been successful in calling Tspi_TPM_GetPubEndorsementKey from a 
remote system? Are there any differences between doing this locally and 
remotely now that I've successfully done it locally?

Jonathan

-----Original Message-----
From: Kent Yoder [mailto:[email protected]] 
Sent: Friday, June 22, 2012 1:08 PM
To: Buhacoff, JonathanX A
Cc: [email protected]
Subject: Re: [TrouSerS-users] reading the public endorsement key

Hi Jonathan,

On Tue, Jun 19, 2012 at 2:36 PM, Buhacoff, JonathanX A 
<[email protected]> wrote:
> Hi, I'm just getting started with trousers and I'm having trouble 
> obtaining the public EK using this API call:
>
>
>
> Tspi_TPM_GetPubEndorsementKey(hTPM, FALSE, &validationData, &hEK)
>
>
>
> I get the error TSS_E_KEY_ALREADY_REGISTERED, which doesn't make sense 
> to me because I'm trying to obtain the existing public EK, not create a new 
> one.

  That return code doesn't make sense to me either. Passing FALSE as the second 
param means the TPM must be unowned for that to succeed. Is that what you 
intended?

Kent

>
>
> Can someone please give me a hint?
>
>
>
> Thanks,
>
> Jonathan
>
>
>
>
> ----------------------------------------------------------------------
> --------
> Live Security Virtual Conference
> Exclusive live event will cover all the ways today's security and 
> threat landscape has changed and how IT managers can respond. 
> Discussions will include endpoint security, mobile security and the 
> latest in malware threats. 
> http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
> _______________________________________________
> TrouSerS-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/trousers-users
>



--
IBM LTC Security

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
TrouSerS-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/trousers-users

Reply via email to