Re: [Tpm2] Windows TBS and using tpm2-tss FAPI

Hi Alexis,

that sounds like a lot of great work.

So ESYS should be working just fine. I had no problems using it just like under linux.
Can you tell me what your problems are ?

Regarding FAPI; yes the provisioning is something we have to figure out.
The reason is that Windows will already do some of these steps, such as setting auth values and making keys persistent.
I’d love to help here.
Do you already have the FAPI modules for file storage ported over to windows ?

Cheers,
Andreas

From: Tpm2 <[email protected]> On Behalf Of Alexis Garnier
Sent: Dienstag, 28. November 2023 19:42
To: [email protected]
Subject: [Tpm2] Windows TBS and using tpm2-tss FAPI

Caution: This e-mail originated outside Infineon Technologies. Do not click on links or open attachments unless you validate it is safe<https://intranet-content.infineon.com/explore/aboutinfineon/rules/informationsecurity/ug/SocialEngineering/Pages/SocialEngineeringElements_en.aspx>.


Hello,

I have been trying to implement a solution using the tpm2-tss FAPI to talk to a Windows TPM, via the TCTI TBS.

I have used the FAPI successfully on Linux and thought that by using the Visual Studio existing solution in tpm2-tss and porting the tpm2-tss FAPI on top I might be able to have something working.

Whilst part of the solution seems to work, the Windows TPM has been uncooperative on a lot of instances, first during the startup sequence when trying to get capabilities, among other things.

I'm also assuming the provisioning process based on the fapi profiles process will not work for TBS.

My question is simple, has there ever been a successful ESYS implementation on Windows ? One with examples I might be able to base myself on to try and make it work ?

I might be a bit green when it comes to working with TPMs so I apologize if my request seems ignorant.

Thanks in advance for your help

Regards,
Alexis Garnier