[tpm2] Re: Lifecycle of handles and contexts
Tim K <tpm2 at bitzap.e4ward.com> Tue, 19 Jul 2022 02:25:28 +0000
| Newsgroups | dev.linux.lists.tpm2 |
|---|---|
| Message-ID | <[email protected]> |
> On Mon, 2022-07-18 at 17:36 +0000, Kenneth Goldman wrote: > > It would help to have specific examples and your environment, very > rarely do you ever need to be concerned with flushcontext calls. The > details below will be very specific to Linux using a resource manager > and the tpm2-tools. If your using the tpm2-tools you use a context > file, so even if the object is flushed, when you call tpm2_unseal -c > <context file> the context is loaded and object is created again. The > context files are only good for that "tpm boot". The same is if your > not using a resource manager, since the tpm2-tools act as a resource > manager. This is so you can use transient objects between commands and > have a resource manager automatically flush the transient resources. > The end goal is that the behavior should appear the same with and > without Resource Managers running in your scripts. Indeed, I do use tpm2-tools on Ubuntu 20.04 LTS, with the kernel RM (no tpm2-abrmd). This is exactly the confirmation I was looking for, thank you. I figured it was something like that otherwise I could not explain why it worked.