Thanks for your reply.
On 5/21/20 8:08 AM, Roberts, William C wrote:
> -----Original Message-----
> From: ted.h.kim(a)oracle.com [mailto:firstname.lastname@example.org]
> Sent: Wednesday, May 20, 2020 7:38 PM
> To: Desai, Imran <imran.desai(a)intel.com>
> Cc: tpm2(a)lists.01.org
> Subject: [tpm2] Re: trying duplication and then rsa_en/decrypt
> The fix worked -- Thank you.
> One other suggestion would be to add "userwithauth" to the tpm2_create
> commands in the man page examples for tpm2_duplicate(1) and
> tpm2_policyduplicationselect(1). This would make the duplicated keys in those
> examples more useful.
That patch I had to revert, a similar fix will come out, but we must not turn down
- doesn't provide attributes via -a
- doesn't provide a password
- does provide a policy
If someone specifies a policy and no password without explicitly providing the
they likely want the authorization to the object to be controlled via policy, not policy
an empty password. So when the tool is choosing attributes that's how it needs to do
So for your example, you'll have to specify userwithauth and then we will update the
manpage to reflect this.
Note that your creating an object with no real auth value (empty password), so keep that
understand, looking forward to the final fix
> Since I am on the 4.1.X branch, should I expect this fix to roll
out with 4.1.3 ?
Why not just bump versions? Everything on 4.X is backwards compat, nothing breaks.
You may need to bump your tss version, but again, backwards compat, should just
I will eventually do that.
But for the moment, I don't have the time. I know using tpm2-tools-4.2.X
requires tpm2-tss-2.4.x which for my environment has some missing
dependencies which I have yet to resolve.
> On 5/20/20 1:49 PM, ted.h.kim(a)oracle.com wrote:
>> Okay, I will try it out.
>> Also thanks for the pointer to the example on duplicating objects
>> between TPMs.
>> On 5/20/20 12:44 PM, Imran Desai wrote:
>>> I have a PR fixing this issue. If you want to try your script with
>>> this branch, it is here:
>>> tpm2 mailing list -- tpm2(a)lists.01.org To unsubscribe send an email
>>> to tpm2-leave(a)lists.01.org
> Ted H. Kim, PhD
> +1 310-258-7515
> tpm2 mailing list -- tpm2(a)lists.01.org
> To unsubscribe send an email to tpm2-leave(a)lists.01.org
Ted H. Kim, PhD