[tpm2] Re: Integrity check failed during tpm2_evictcontrol

Hi, the commands also work fine with an Infineon TPM and an AMD firmware TPM.

Am 02.02.22 um 22:40 schrieb Nicholas A Tufano:
> Hi. I'm using tpm2-tools 4.1.1 and I'm getting this error when I run tpm2_evictcontrol immediately following tpm2_createprimary to save the handle to the TPM persistent memory.
> 
> WARNING:esys:src/tss2-esys/api/Esys_ContextLoad.c:279:Esys_ContextLoad_Finish() Received TPM Error
> ERROR:esys:src/tss2-esys/api/Esys_ContextLoad.c:93:Esys_ContextLoad() Esys Finish ErrorCode (0x000001df)
> ERROR: Esys_ContextLoad(0x1DF) - tpm:parameter(1):integrity check failed
> ERROR:esys:src/tss2-esys/esys_tr.c:357:Esys_TR_Close() Error: Esys handle does not exist (70018).
> ERROR: Esys_TR_Close(0x70018) - esapi:0x18
> ERROR: Unable to run tpm2_evictcontrol
> The commands run to get here
> 
> tpm2_changeauth --tcti=mssim:host=::1,port=1234 --object-context=owner test1
> tpm2_createprimary --tcti=mssim:host=::1,port=1234 --hierarchy=o --key-auth=test2 --hash-algorithm=sha256 --key-algorithm=ecc --key-context=/tmp/srk_context --hierarchy-auth=test1
> tpm2_evictcontrol --tcti=mssim:host=::1,port=1234 --hierarchy=o  --object-context=/tmp/srk_context --auth=test1 0x81000002
> It seems like there is a problem loading the context file that gets generated from tpm2_createprimary. This flow of commands worked fine when using the IBM TPM2 simulator but they do not work on a Nuvoton TPM.
> Any insight would be appreciated. Thanks.
> 
> 
> 
> _______________________________________________
> tpm2 mailing list -- tpm2(a)lists.01.org
> To unsubscribe send an email to tpm2-leave(a)lists.01.org
> %(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s