tpm

Expected behaviour

I expected the VM to come up normally, just exchanging NAT IP by bridge IP

Actual behaviour

When adding the bridge="br0" line to the conf file, when trying to start VM immediately a "Connect to SPICE" window pops up asking for Hostname, Port, TLS Port and showing recent connections that obviously now don't work anymore.

As don't know much about spice, maybe

The Keylime documentation is now part of the main repository and want to improve it. Following things need to be improved:

How to use the TPM EK CA Store

There is currently no documentation on how to add custom CA to the cert store (there is only a comment in the keylime.conf).

• Add documentation where the cert store is located and which format is used
• Add list of cert

Environment

Board: APL UPSquared with PTT
OS: Ubuntu 20.04 (opensc 0.20.0-3)
tpm2-tss: 4.2.1 (tarball)
tpm2-pkcs11: 1.3.1 (tarball)
tpm2-tools: 4.1.3 (tarball)
tpm2-abrmd: Not installed
Token initialized with tpm2_ptool with label tpmhsm

Error message

id=`uuidgen | tr -d -`
pkcs11-tool --module /usr/lib/libtpm2_pkcs11.so --token-label tpmhsm --login --pin (redacted) --key-

This is a good first issue for someone who wants to get into OSS/TPM development.

We need a simple example to show TPM signature verification.

We already have examples for TPM2_Quote and TPM2_GetTime that can be used to generate signed TPM blob(data).

Details:

• Both TPM2_Quote and TPM2_GetTime produce similar output using TPM2B_ATTEST and TPMT_SIGNATURE structures.
• The TPMT_SIGNATU

The if statement always evaluates to true:

https://github.com/tpm2-software/tpm2-tss-engine/blob/8acc6181f27c1b60263ab9ad5e28f4638e0460ed/src/tpm2-tss-engine-common.c#L490