[tpm2] Re: Help - how to store a certificate in the NV under the platform hierarchy?

I'm using the ibm swtpm... but I get the error anyway and I'm not able to understand what's wrong.

This is what I do:
openssl x509 -outform der -in idevid.crt -out idevid.der
DER_SIZE=$(wc -c idevid.der | awk '{ print $1 }')
echo $DER_SIZE

tpm2_nvdefine 0x01C90000 -C p -s $DER_SIZE -a "ppread|ppwrite"

...and I get the error I already mentione:
WARNING:esys:src/tss2-esys/api/Esys_NV_DefineSpace.c:344:Esys_NV_DefineSpace_Finish() Received TPM Error
ERROR:esys:src/tss2-esys/api/Esys_NV_DefineSpace.c:122:Esys_NV_DefineSpace() Esys Finish ErrorCode (0x000009a2)
ERROR: Failed to define NV area at index 0x1C90000
ERROR: Esys_NV_DefineSpace(0x9A2) - tpm:session(1):authorization failure without DA implications
ERROR: Failed to create NV index 0x1c90000.
ERROR: Unable to run tpm2_nvdefine