[tpm2] Re: Help - how to store a certificate in the NV under the platform hierarchy?

I guess you need to add the platformcreate attribute to -a

That would be my last idea I'm afraid...
Next advice would be to gdb into swtpm; set some breakpoints and have a look inside... ;-)

________________________________________
Von: arlotito(a)microsoft.com <arlotito(a)microsoft.com>
Gesendet: Donnerstag, 17. Februar 2022 11:03
An: tpm2(a)lists.01.org
Betreff: [tpm2] Re: Help - how to store a certificate in the NV under the platform hierarchy?

I'm using the ibm swtpm... but I get the error anyway and I'm not able to understand what's wrong.

This is what I do:
openssl x509 -outform der -in idevid.crt -out idevid.der
DER_SIZE=$(wc -c idevid.der | awk '{ print $1 }')
echo $DER_SIZE

tpm2_nvdefine 0x01C90000 -C p -s $DER_SIZE -a "ppread|ppwrite"

...and I get the error I already mentione:
WARNING:esys:src/tss2-esys/api/Esys_NV_DefineSpace.c:344:Esys_NV_DefineSpace_Finish() Received TPM Error
ERROR:esys:src/tss2-esys/api/Esys_NV_DefineSpace.c:122:Esys_NV_DefineSpace() Esys Finish ErrorCode (0x000009a2)
ERROR: Failed to define NV area at index 0x1C90000
ERROR: Esys_NV_DefineSpace(0x9A2) - tpm:session(1):authorization failure without DA implications
ERROR: Failed to create NV index 0x1c90000.
ERROR: Unable to run tpm2_nvdefine
_______________________________________________
tpm2 mailing list -- tpm2(a)lists.01.org
To unsubscribe send an email to tpm2-leave(a)lists.01.org
%(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s