[tpm2] Using a session with TPM2_CreatePrimary

Shaw, Adrian <adrian.shaw at hp.com> Wed, 22 Jun 2022 17:10:12 +0000
Newsgroups dev.linux.lists.tpm2
Message-ID <[email protected]>
Hi everyone,

I’m trying to create a primary key using an authenticated and encrypted session.

I looked at the man page for tpm2_createprimary https://github.com/tpm2-software/tpm2-tools/blob/1226b5333e0f051edf67739743a68f668f9ba07a/man/tpm2_createprimary.1.md

It does not seem to be possible - there is no way to specify the session to use.

However, it is possible to do this in the IBM TSS equivalent https://www.mankier.com/1/tsscreateprimary

I noticed you can specify a session for other commands though, like tpm2_create, but not with tpm2_createprimary.

Is this a missing feature or am I missing some fundamental understanding?

Thanks,
Adrian
attachment.htm (text/html, 1.6 KB)
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
Hi everyone,
<div class=""><br class="">
</div>
<div class="">I’m trying to create a primary key using an authenticated and encrypted session.</div>
<div class=""><br class="">
</div>
<div class="">I looked at the man page for tpm2_createprimary&nbsp;<a href="https://github.com/tpm2-software/tpm2-tools/blob/1226b5333e0f051edf67739743a68f668f9ba07a/man/tpm2_createprimary.1.md" class="">https://github.com/tpm2-software/tpm2-tools/blob/1226b5333e0f051edf67739743a68f668f9ba07a/man/tpm2_createprimary.1.md</a></div>
<div class=""><br class="">
</div>
<div class="">It does not seem to be possible - there is no way to specify the session to use.&nbsp;</div>
<div class=""><br class="">
</div>
<div class="">However, it is possible to do this in the IBM TSS equivalent&nbsp;<a href="https://www.mankier.com/1/tsscreateprimary" class="">https://www.mankier.com/1/tsscreateprimary</a></div>
<div class=""><br class="">
</div>
<div class=""><span style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);" class="">I noticed you can specify a session for other commands though, like tpm2_create, but not with tpm2_createprimary.</span></div>
<div class=""><br class="">
</div>
<div class="">Is this a missing feature or am I missing some fundamental understanding?</div>
<div class=""><br class="">
</div>
<div class="">Thanks,</div>
<div class="">Adrian</div>
</body>
</html>