[tpm2] Re: Virtualbox ubuntu 22.04 guest with tpm_server

<p style="padding:0 0 0 0; margin:0 0 0 0;">Hello.</p>

<p style="padding:0 0 0 0; margin:0 0 0 0;">&nbsp;</p>

<p style="padding:0 0 0 0; margin:0 0 0 0;">You made a very nice and detailed problem description. I wish all problem reports were like yours :)</p>

<p style="padding:0 0 0 0; margin:0 0 0 0;">You are on a good track. You may keep using the ibmswtpm2.</p>

<p style="padding:0 0 0 0; margin:0 0 0 0;">&nbsp;</p>

<p style="padding:0 0 0 0; margin:0 0 0 0;">The errors you are getting mean that the tpm2-tools are trying to access the hardware TPM, which isn't there. You successfully connected the abrmd to the TPM simulator (the --tcti argument of abrmd), now you should connect the tpm2-tools to the abrmd by setting the TPM2TOOLS_TCTI variable or using the --tcti argument of the tpm2_pcrread. The TCTI should point to the abrmd (see https://github.com/tpm2-software/tpm2-tools/blob/master/man/common/tcti.md for some details.) The following might do the job:</p>

<p style="padding:0 0 0 0; margin:0 0 0 0;"><span class="pl-ent">export TPM2TOOLS_TCTI="</span><span class="pl-s">tabrmd:bus_name=com.intel.tss2.Tabrmd"</span></p>

<p style="padding:0 0 0 0; margin:0 0 0 0;">&nbsp;</p>

<p style="padding:0 0 0 0; margin:0 0 0 0;">&nbsp;</p>

<p style="padding:0 0 0 0; margin:0 0 0 0;">Regards,</p>

<p style="padding:0 0 0 0; margin:0 0 0 0;">Petr</p>

<p style="padding:0 0 0 0; margin:0 0 0 0;">&nbsp;</p>

<p style="padding:0 0 0 0; margin:0 0 0 0;">______________________________________________________________<br />
&gt; Od: [email protected]<br />
&gt; Komu: [email protected]<br />
&gt; Datum: 23.05.2022 17:44<br />
&gt; Předmět: [tpm2] Virtualbox ubuntu 22.04 guest with tpm_server<br />
&gt;</p>

I am developing a c++ application for a dell server running ubuntu 22.04. The application needs to store private keys and use them to decrypt files.<br />
 <br />
 Before working on target hardware, I'm trying to get a virtualbox environment set up to use a simulated TPM2. &nbsp;Before writing the C++ application I'd like to get some command line tools working. I have struggled for a week following instructions I've found (for example: <a href="https://tpm2-tools.readthedocs.io/en/latest/INSTALL/">https://tpm2-tools.readthedocs.io/en/latest/INSTALL/</a>, <a href="https://francislampayan.medium.com/how-to-setup-tpm-simulator-in-ubuntu-20-04-25ec673b88dc">https://francislampayan.medium.com/how-to-setup-tpm-simulator-in-ubuntu-20-04-25ec673b88dc</a>, etc). I am trying to use IBM's SWTPM2, but have not had any luck.<br />
 <br />
 Virtualbox 6.1.30<br />
 Windows 10 host<br />
 Ubuntu 22.04 server guest<br />
 <br />
 TPM SERVER SIMULATOR<br />
 First, I'm installing tpm_server. Since ubuntu 22.04 uses openssl3.0, I cannot use v1661, but instead am getting the latest version from the "next" branch:<br />
 $ git clone <a href="https://git.code.sf.net/p/ibmswtpm2/tpm2">https://git.code.sf.net/p/ibmswtpm2/tpm2</a> ibmswtpm2-tpm2<br />
 $ cd ibmswtpm2-tpm/src<br />
 $ make<br />
 <br />
 TPM2 - ABRMD<br />
 $ git clone <a href="https://github.com/tpm2-software/tpm2-abrmd.git">https://github.com/tpm2-software/tpm2-abrmd.git</a><br />
 $ cd tpm2-abrmd<br />
 $ ./bootstrap<br />
 $ ./configure \<br />
 --with-dbuspolicydir=/etc/dbus-1/system.d \<br />
 --with-systemdsystemunitdir=/usr/lib/systemd/system \<br />
 --libdir=/usr/lib64 --prefix=/usr <br />
 $ make -j5<br />
 $ sudo make install<br />
 <br />
 TPM2 - tss<br />
 $ git clone <a href="https://github.com/tpm2-software/tpm2-tss.git">https://github.com/tpm2-software/tpm2-tss.git</a><br />
 $ cd tpm2-tss<br />
 $ ./bootstrap<br />
 $ ./configure<br />
 $ make<br />
 $ sudo make install<br />
 $ sudo ldconfig<br />
 <br />
 TPM2 - tools<br />
 $ git clone <a href="https://github.com/tpm2-software/tpm2-tools.git">https://github.com/tpm2-software/tpm2-tools.git</a><br />
 $ cd tpm2-tools<br />
 $ ./bootstrap<br />
 $ ./configure --prefix=/usr<br />
 $ make -j5<br />
 $ sudo make install<br />
 <br />
 I'm just starting things on the command line, before makin them services. In one window I start the TPM simulator:<br />
 $ tpm2_server<br />
 <br />
 In another window I start the ABRMD:<br />
 sudo -u tss tpm2-abrmd --tcti="libtss2-tcti-mssim.so.0:host=127.0.0.1,port=2321"<br />
 <br />
 I see this in the window that started the TPM server:<br />
 LIBRARY_COMPATIBILITY_CHECK is ON<br />
 Starting ACT thread...<br />
 TPM command server listening on port 2321<br />
 Platform server listening on port 2322<br />
 Command IPv4 client accepted<br />
 Platform IPv4 client accepted<br />
 <br />
 Then I try to run a command line tool:<br />
 tpm2_pcrread<br />
 ERROR:tcti:src/tss2-tcti/tcti-device.c:452:Tss2_Tcti_Device_Init() Failed to open specified TCTI device file /dev/tpmrm0: No such file or directory<br />
 ERROR:tcti:src/tss2-tcti/tctildr-dl.c:170:tcti_from_file() Could not initialize TCTI file: libtss2-tcti-device.so.0<br />
 ERROR:tcti:src/tss2-tcti/tcti-device.c:452:Tss2_Tcti_Device_Init() Failed to open specified TCTI device file /dev/tpm0: No such file or directory<br />
 ERROR:tcti:src/tss2-tcti/tctildr-dl.c:170:tcti_from_file() Could not initialize TCTI file: libtss2-tcti-device.so.0<br />
 <br />
 And I get no output. &nbsp;I feel like I'm not configuring the TSS correctly. Can anyone give me insight on how to run this? &nbsp;Should I be using a different simulator? I haven't found any good instructions for how to run <a href="https://github.com/stefanberger/swtpm">https://github.com/stefanberger/swtpm</a> in a virtualbox guest.<br />
 _______________________________________________<br />
 tpm2 mailing list -- [email protected]<br />
 To unsubscribe send an email to [email protected]<br />
 %(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s<br />