[tpm2] Re: Using a session with TPM2_CreatePrimary

[tpm2] Re: Using a session with TPM2_CreatePrimary

[Desai, Imran]

[-- Attachment #1: Type: text/plain, Size: 1506 bytes --]

That’s right, it needs to be added for createprimary. Having said that, if your tpm supports createloaded, you can use tpm2_create tool  to create a primary object as well.
________________________________
From: Roberts, William C <william.c.roberts(a)intel.com>
Sent: Sunday, June 26, 2022 3:31:56 PM
To: Shaw, Adrian <adrian.shaw(a)hp.com>; tpm2(a)lists.01.org <tpm2(a)lists.01.org>; Desai, Imran <imran.desai(a)intel.com>
Subject: Re: Using a session with TPM2_CreatePrimary

I'm pretty sure it's just missing; we haven't enabled session support throughout all the tools yet. Imran am I correct?
________________________________
From: Shaw, Adrian <adrian.shaw(a)hp.com>
Sent: Wednesday, June 22, 2022 12:10 PM
To: tpm2(a)lists.01.org <tpm2(a)lists.01.org>
Subject: [tpm2] Using a session with TPM2_CreatePrimary

Hi everyone,

I’m trying to create a primary key using an authenticated and encrypted session.

I looked at the man page for tpm2_createprimary https://github.com/tpm2-software/tpm2-tools/blob/1226b5333e0f051edf67739743a68f668f9ba07a/man/tpm2_createprimary.1.md

It does not seem to be possible - there is no way to specify the session to use.

However, it is possible to do this in the IBM TSS equivalent https://www.mankier.com/1/tsscreateprimary

I noticed you can specify a session for other commands though, like tpm2_create, but not with tpm2_createprimary.

Is this a missing feature or am I missing some fundamental understanding?

Thanks,
Adrian

[-- Attachment #2: attachment.htm --]
[-- Type: text/html, Size: 3132 bytes --]

[tpm2] Re: Using a session with TPM2_CreatePrimary

[Shaw, Adrian]

[-- Attachment #1: Type: text/plain, Size: 2228 bytes --]

Thanks, William and Imran. I'll have a look at using your suggestion instead.

From: Desai, Imran <imran.desai(a)intel.com>
Sent: 27 June 2022 00:32
To: Roberts, William C <william.c.roberts(a)intel.com>; Shaw, Adrian <adrian.shaw(a)hp.com>; tpm2(a)lists.01.org
Subject: Re: Using a session with TPM2_CreatePrimary

That's right, it needs to be added for createprimary. Having said that, if your tpm supports createloaded, you can use tpm2_create tool  to create a primary object as well.
________________________________
From: Roberts, William C <william.c.roberts(a)intel.com<mailto:william.c.roberts(a)intel.com>>
Sent: Sunday, June 26, 2022 3:31:56 PM
To: Shaw, Adrian <adrian.shaw(a)hp.com<mailto:adrian.shaw(a)hp.com>>; tpm2(a)lists.01.org<mailto:tpm2(a)lists.01.org> <tpm2(a)lists.01.org<mailto:tpm2(a)lists.01.org>>; Desai, Imran <imran.desai(a)intel.com<mailto:imran.desai(a)intel.com>>
Subject: Re: Using a session with TPM2_CreatePrimary

I'm pretty sure it's just missing; we haven't enabled session support throughout all the tools yet. Imran am I correct?
________________________________
From: Shaw, Adrian <adrian.shaw(a)hp.com<mailto:adrian.shaw(a)hp.com>>
Sent: Wednesday, June 22, 2022 12:10 PM
To: tpm2(a)lists.01.org<mailto:tpm2(a)lists.01.org> <tpm2(a)lists.01.org<mailto:tpm2(a)lists.01.org>>
Subject: [tpm2] Using a session with TPM2_CreatePrimary

Hi everyone,

I'm trying to create a primary key using an authenticated and encrypted session.

I looked at the man page for tpm2_createprimary https://github.com/tpm2-software/tpm2-tools/blob/1226b5333e0f051edf67739743a68f668f9ba07a/man/tpm2_createprimary.1.md<https://github.com/tpm2-software/tpm2-tools/blob/1226b5333e0f051edf67739743a68f668f9ba07a/man/tpm2_createprimary.1.md>

It does not seem to be possible - there is no way to specify the session to use.

However, it is possible to do this in the IBM TSS equivalent https://www.mankier.com/1/tsscreateprimary<https://www.mankier.com/1/tsscreateprimary>

I noticed you can specify a session for other commands though, like tpm2_create, but not with tpm2_createprimary.

Is this a missing feature or am I missing some fundamental understanding?

Thanks,
Adrian

[-- Attachment #2: attachment.htm --]
[-- Type: text/html, Size: 6119 bytes --]

[tpm2] Re: Using a session with TPM2_CreatePrimary

[Roberts, William C]

[-- Attachment #1: Type: text/plain, Size: 1018 bytes --]

I'm pretty sure it's just missing; we haven't enabled session support throughout all the tools yet. Imran am I correct?
________________________________
From: Shaw, Adrian <adrian.shaw(a)hp.com>
Sent: Wednesday, June 22, 2022 12:10 PM
To: tpm2(a)lists.01.org <tpm2(a)lists.01.org>
Subject: [tpm2] Using a session with TPM2_CreatePrimary

Hi everyone,

I’m trying to create a primary key using an authenticated and encrypted session.

I looked at the man page for tpm2_createprimary https://github.com/tpm2-software/tpm2-tools/blob/1226b5333e0f051edf67739743a68f668f9ba07a/man/tpm2_createprimary.1.md

It does not seem to be possible - there is no way to specify the session to use.

However, it is possible to do this in the IBM TSS equivalent https://www.mankier.com/1/tsscreateprimary

I noticed you can specify a session for other commands though, like tpm2_create, but not with tpm2_createprimary.

Is this a missing feature or am I missing some fundamental understanding?

Thanks,
Adrian

[-- Attachment #2: attachment.htm --]
[-- Type: text/html, Size: 2308 bytes --]