Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

tpm2-abrmd run command for non-simulator tpm #92

Closed
idesai opened this issue Jun 21, 2017 · 7 comments
Closed

tpm2-abrmd run command for non-simulator tpm #92

idesai opened this issue Jun 21, 2017 · 7 comments

Comments

@idesai
Copy link
Member

idesai commented Jun 21, 2017

sudo -u tss tpm2-abrmd
** (tpm2-abrmd:1838): WARNING **: failed to initialize device TCTI context: 0xa000a

** (tpm2-abrmd:1838): CRITICAL **: TCTI initialization failed: 0xa000a

tpm2_rc_decode 0xa000a
error layer
hex: 0xa0000
identifier: TSS2_TCTI_ERROR_LEVEL
description: Error from the TCTI
base error code
identifier: TSS2_BASE_RC_IO_ERROR
description: IO failure

@idesai
Copy link
Member Author

idesai commented Jun 21, 2017

Solved this by running without -u tss option
So run this just with
sudo tpm2-abrmd
May need to update the readme.
I tested this with ptt

@flihp
Copy link
Contributor

flihp commented Jun 21, 2017

What were the permissions on the TPM device node?:

$ls -l /dev/tpm*
???

@lamalexck
Copy link
Contributor

lamalexck commented Jun 21, 2017 via email

@flihp
Copy link
Contributor

flihp commented Jun 21, 2017

@flihp
Copy link
Contributor

flihp commented Jun 21, 2017

@idesai
Copy link
Member Author

idesai commented Jun 21, 2017

Thanks! These were my steps for ubuntu
ls /etc/udev/rules.d/ --> path where the rules should be at. Check for your distribution.
git clone https://github.com/01org/tpm2-abrmd.git
./bootstrap
./configure --with-dbuspolicydir=/etc/dbus-1/system.d --with-udevrulesdir=/etc/udev/rules.d/
make -j8
sudo make install
ls /etc/udev/rules.d/ --> should now have tpm-udev.rules
sudo udevadm control --reload-rules && sudo udevadm trigger
sudo mkdir -p /var/lib/tpm
sudo groupadd tss && sudo useradd -M -d /var/lib/tpm -s /bin/false -g tss tss
sudo pkill -HUP dbus-daemon
sudo -u tss tpm2-abrmd --tcti=device

@flihp
Copy link
Contributor

flihp commented Jun 26, 2017

thx for working through this and posting the results. It's a bit obnoxious that the default prefixis never the default directory for a distro's dbus / udev rules dir. Still if you know your distro the configurability makes customization easy. In the ideal end state distros will take care of all of this crap for the majority of users. Only devs like yourself need to know these details :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants