[Tpm2] Windows TBS and using tpm2-tss FAPI

Alexis Garnier <[email protected]> Tue, 28 Nov 2023 19:41:54 +0100
Newsgroups dev.linux.lists.tpm2
Message-ID <CANbXECnRoE2R3mog=aj_qDYFkDj-fvwYkpoZNVyyayyEHXHyrQ@mail.gmail.com>
Hello,

I have been trying to implement a solution using the tpm2-tss FAPI to talk
to a Windows TPM, via the TCTI TBS.

I have used the FAPI successfully on Linux and thought that by using the
Visual Studio existing solution in tpm2-tss and porting the tpm2-tss FAPI
on top I might be able to have something working.

Whilst part of the solution seems to work, the Windows TPM has been
uncooperative on a lot of instances, first during the startup sequence when
trying to get capabilities, among other things.

I'm also assuming the provisioning process based on the fapi profiles
process will not work for TBS.

My question is simple, has there ever been a successful ESYS implementation
on Windows ? One with examples I might be able to base myself on to try and
make it work ?

I might be a bit green when it comes to working with TPMs so I apologize if
my request seems ignorant.

Thanks in advance for your help

Regards,
Alexis Garnier