**** BEGIN LOGGING AT Thu Aug 04 02:59:58 2016 Aug 04 03:42:17 hello,every one!I need your help.main Asking TPM to create the key returned 0x00000001. Authentication failed. Aug 04 03:42:37 I don't know what's wrong Aug 04 03:43:08 I have change my RSA key to none Aug 04 03:46:08 Guest34944: maybe start by describing what hardware you're talking about and what you're trying to do? Aug 04 03:47:39 I mean evidently you're trying to do something with some TPM, but that's about all that can be guessed Aug 04 03:48:41 I just want to creat a Bind Key Aug 04 03:50:21 I did as Programming With Trousers Aug 04 03:51:04 (also, you realize this is a support channel for the various beagleboard/beaglebone embedded systems, not a support channel on how to use a TPM?) Aug 04 03:51:05 Line54,main Create Context returned 0x00000000. Success. Line57,main Context Connect returned 0x00000000. Success. Line60,main Get TPM Handle returned 0x00000000. Success. Line63,main Got the SRK handle returned 0x00000000. Success. Line66,main Got the SRK policy returned 0x00000000. Success. Line69,main Set the SRK secret in its policy returned 0x00000000. Success. Line74,main Create a backup policy object returned 0x00000000. Su Aug 04 03:51:42 please don't try to paste large amounts of text, use a service like http://pastebin.com/ Aug 04 03:52:08 Ok ,I'm sorry Aug 04 03:53:38 and realize that probably very few people here have any experience with TPMs, especially since attaching one to a beagleboard/beaglebone is fairly useless Aug 04 03:55:07 Ok,I'm get it. Aug 04 03:55:54 (well okay it has *some* potential use cases, like preventing public keys from being extractable from a system if it's compromised) Aug 04 03:56:03 *private keys Aug 04 03:57:52 (but quite often people who tinker with a TPM actually want to secure boot, which is something for which a TPM is actually neither necessary nor sufficient) Aug 04 03:58:35 ok,thanks a lot Aug 04 03:59:54 When I use the tpm_sealdata,it came back also is 0x00000001 Aug 04 04:00:50 and Authentication failed Aug 04 04:02:16 you can increase logging using -l debug to maybe see what goes wrong exactly Aug 04 04:07:03 (the most obvious reason for "authentication failed" would be wrong SRK password obviously) Aug 04 04:07:53 (if one is set) Aug 04 04:15:03 ok,I have reset my SRK Aug 04 04:15:28 the srk password you mean Aug 04 04:15:36 I know Aug 04 04:16:02 Yes,SRK password Aug 04 04:20:09 (it is of course also possible to create a new SRK, but that requires completely resetting ownership of the TPM) Aug 04 04:20:38 Ok,I'll have a try Aug 04 04:20:43 why? Aug 04 04:20:55 there's normally never any reason to do that Aug 04 04:21:25 except e.g. if you sell the device to someone else Aug 04 04:21:26 I just change SRK password Aug 04 04:22:16 mind you, I'm not even sure why sealdata would need authorization to the SRK, but I haven't played with TPMs much yet mself Aug 04 04:22:49 also, a question I still feel repeating, why are you asking this *here* ? in this channel ? Aug 04 04:24:01 My device is beageboneblack with cryptocape,I don't know where can help me Aug 04 04:24:12 oh, that silly thing Aug 04 04:24:51 just curious, what are you hoping to accomplish ultimately? Aug 04 04:28:51 I just want to know how can I solve this problem now. Aug 04 04:37:54 tpm_sealdata seems to work fine on my laptop (although it's impressively slow) Aug 04 04:39:08 http://pastebin.com/8CEtsqif Aug 04 04:41:24 and it unseals again too Aug 04 04:41:25 root:~# tpm_unsealdata -z -i test.txt.sealed Aug 04 04:41:25 hello world Aug 04 14:48:56 Hi People Aug 04 17:37:29 I'm really hitting a wall here. I'm using http://elinux.org/BeagleBone_Black_Extracting_eMMC_contents to make my own SD card flash image for BBB. It works perfectly. But when I put it in a BBG, I get an error about the eMMC revision 7. I found I need to update the kernel. But I don't know how to reinsert this updated kernel back into the uImage file from "beagleboneblack-save-emmc.zip" I've tried rremaking the whole thing f Aug 04 17:37:29 rom source but I get an error about: "gen_initramfs_list.sh: Cannot open '../../images/rootfs.cpio.gz'" How the heck can I get BBG to work with this script?! **** ENDING LOGGING AT Fri Aug 05 02:59:58 2016