[tpm2] Integrity check failed during tpm2_evictcontrol

Nicholas A Tufano <natufano at us.ibm.com>
Newsgroups dev.linux.lists.tpm2
Message-ID <OF0ACF65B2.D86991A3-ON002587DD.0076F9B1-002587DD.0077185D@ibm.com>
attachment.htm (text/html, 2.4 KB)
<div class="socmaildefaultfont" dir="ltr" style="font-family:Arial, Helvetica, sans-serif;font-size:10pt" ><div dir="ltr" ><div style="outline: none; caret-color: rgb(18, 18, 18); color: rgb(18, 18, 18);" >Hi. I'm using tpm2-tools 4.1.1 and I'm getting this error when I run tpm2_evictcontrol immediately following tpm2_createprimary to save the handle to the TPM persistent memory.&nbsp;</div>
<div style="outline: none; caret-color: rgb(18, 18, 18); color: rgb(18, 18, 18);" ><br style="outline: none;" >WARNING:esys:src/tss2-esys/api/Esys_ContextLoad.c:279:Esys_ContextLoad_Finish() Received TPM Error<br style="outline: none;" >ERROR:esys:src/tss2-esys/api/Esys_ContextLoad.c:93:Esys_ContextLoad() Esys Finish ErrorCode (0x000001df)<br style="outline: none;" >ERROR: Esys_ContextLoad(0x1DF) - tpm:parameter(1):integrity check failed<br style="outline: none;" >ERROR:esys:src/tss2-esys/esys_tr.c:357:Esys_TR_Close() Error: Esys handle does not exist (70018).<br style="outline: none;" >ERROR: Esys_TR_Close(0x70018) - esapi:0x18<br style="outline: none;" >ERROR: Unable to run tpm2_evictcontrol<br style="outline: none;" >&nbsp;</div>
<div style="outline: none; caret-color: rgb(18, 18, 18); color: rgb(18, 18, 18);" >The commands run to get here<br style="outline: none;" ><br style="outline: none;" >tpm2_changeauth --tcti=mssim:host=::1,port=1234 --object-context=owner test1</div>
<div style="outline: none; caret-color: rgb(18, 18, 18); color: rgb(18, 18, 18);" >tpm2_createprimary --tcti=mssim:host=::1,port=1234 --hierarchy=o --key-auth=test2 --hash-algorithm=sha256 --key-algorithm=ecc --key-context=/tmp/srk_context --hierarchy-auth=test1</div>
<div style="outline: none; caret-color: rgb(18, 18, 18); color: rgb(18, 18, 18);" >tpm2_evictcontrol --tcti=mssim:host=::1,port=1234 --hierarchy=o &nbsp;--object-context=/tmp/srk_context --auth=test1 0x81000002<br style="outline: none;" >&nbsp;</div>
<div style="outline: none; caret-color: rgb(18, 18, 18); color: rgb(18, 18, 18);" >It seems like there is a problem loading the context file that gets generated from tpm2_createprimary. This flow of commands worked fine when using the IBM TPM2 simulator but they do not work on a Nuvoton TPM.</div>
<div style="outline: none; caret-color: rgb(18, 18, 18); color: rgb(18, 18, 18);" >&nbsp;</div>
<div style="outline: none; caret-color: rgb(18, 18, 18); color: rgb(18, 18, 18);" >Any insight would be appreciated. Thanks.</div></div></div><BR>
<BR>
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.