There seems to be a catch-22 when it comes to querying whether a TPM is
enabled/activated:

1. If a TPM is disabled/deactivated, then Tspi_TPM_GetStatus is unavailable and
will fail.

2. Tspi_TPM_GetCapability is available and using the capability flag
TSS_TPMCAP_FLAG will allow a user to see the persistent and volatile flags which
indicate if the TPM is enabled/activated (TPM_PF_DISABLE, TPM_PF_DEACTIVATED,
TPM_SF_DEACTIVATED).

3. However, the only way to successfully execute Tspi_TPM_GetCapability with
TSS_TPMCAP_FLAG is if you have owner authorization. And of course the only way
to have owner authorization is if the TPM is enabled and activated and you've
taken ownership!

It seems to me that the only way to determine if a TPM is enabled/activated is
to call Tspi_TPM_GetStatus with the
TSS_TPMSTATUS_DISABLED/TSS_TPMSTATUS_DEACTIVATED flags and then hope that the
error result indicates if the TPM is disabled or deactivated. Am I correct?


------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_d2d_mar
_______________________________________________
TrouSerS-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/trousers-users

Reply via email to