Group Actions
Engagement
  • Author Author: Jan Cumps
  • Date Created: Date Created
  • Views 1253 views
  • Likes 0 likes
  • Comments 0 comments
Related
Recommended

Infineon SLx9670 Trusted Platform Module (TPM) on Debian 11 "bullseye" - part2: Trusted Software Stack (tss)

Jan Cumps

The latest Raspberry OS at the time of writing this post is Debian 11 "bullseye".
I'm checking how the Infineon TPM IC behaves under that version.
In this 2nd part, I handle the TSS (Trusted Software Stack) software libraries and utilities.
It's not a deep dive into the subject. I want to check if I can still build and use the stack with Debian 11.

Let's now check the installations. If they "just worked", I put a Y in the table below.
When there were issues or failures, I'll elaborate below the table.
I've tried using the latest version of any package - for Debian 11. I specify when I took a different path. 
This will be a WIP post until I've completed the exercise. I'll come back and edit as I go along.
(ignore, solved: Don't try this yet. I've come to a state where the TPM doesn't work anymore in this configuration.)

module version success
tpm2-tss master,
3.1.0-86-g7fde6043,
taken on 11-dec-2021		 Y
tpm2-tabrmd

master,
commit 41fd797112f0aa7b38a34c6e80b63d311b2ff76f,
taken on 11-dec-2021

 Y
tpm2-tools

master,
commit 7b6600d3214dd45531bdb53d5f2510404c31fd6b,
taken on 11-dec-2021

 Y*1
tpm2-tss-engine master,
commit ee470c85583d167305a9a04e73e2c3368e95530b,
taken on 11-dec-2021		 Y*2
cryptsetup todo
tpm2-pkcs11 todo

1: pre-steps complain that package python-yaml has no install candidate. It didn't give issues.
2: at this point, everything stopped working. I'm starting again.

Side stories

tpm2-tss: running the unit and hardware tests

I haven't done this in the road test. It was listed a s a stretch goal. Time to pay up.
Instructions are on Infineon's github. IO configured unit tests and integration tests, with the Infineon hardware as backend.
There are 3 types of test: mandatory, optional and destructive. The destructive option invalidates the IC forever - as per spec. Obviously I'm not executing that suite Expressionless.
The test suite requires root powers to talk to the device. So I changed to root, while keeping the pi user environment settings:

Prepare and run:

sudo -E -s
./configure --enable-unit --enable-integration --with-device=/dev/tpm0 --with-devicetests="mandatory,optional"

image

image

Running the suite takes a while. I'm still root at this time.

The check-device make target takes care that only one process runs at the same time. The suite fails when multiple processes run in parallel.

make check-device

If you want to run them again, with the same configuration, just run the make command again.
If you want to use another config (software simulation instead of using the IC, skip unit tests, only run mandatory test suite, ...) you can rerun configure with the requested options. Then rerun make.

Results:

image
unit test, integration, mandatory and optional

Test log:

Fullscreen test-suite.log Download 
===================================================
   tpm2-tss 3.1.0-86-g7fde6043: ./test-suite.log
===================================================

# TOTAL: 195
# PASS:  133
# SKIP:  12
# XFAIL: 0
# FAIL:  5
# XPASS: 0
# ERROR: 45

.. contents:: :depth: 2

SKIP: test/integration/esys-act-set-timeout
===========================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:host=,port=
Execute the test script
WARNING:esys:src/tss2-esys/api/Esys_ACT_SetTimeout.c:292:Esys_ACT_SetTimeout_Finish() Received TPM Error 
ERROR:esys:src/tss2-esys/api/Esys_ACT_SetTimeout.c:102:Esys_ACT_SetTimeout() Esys Finish ErrorCode (0x00000143) 
ERROR:test:test/integration/esys-act-set-timeout.int.c:65:test_esys_act_set_timeout() Error: Clear ErrorCode (0x00000143) 
Script returned 77
failed to stop daemon, no pid file: /home/pi/tssSetup/tpm2-tss/test/integration/esys-act-set-timeout.int_simulator.pid
SKIP test/integration/esys-act-set-timeout.int (exit status: 77)

SKIP: test/integration/esys-certifyX509
=======================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:host=,port=
Execute the test script
WARNING:esys:src/tss2-esys/api/Esys_CertifyX509.c:345:Esys_CertifyX509_Finish() Received TPM Error 
ERROR:esys:src/tss2-esys/api/Esys_CertifyX509.c:112:Esys_CertifyX509() Esys Finish ErrorCode (0x00000143) 
ERROR:test:test/integration/esys-certifyX509.int.c:183:test_esys_certifyx509() Error: CertifyX509 ErrorCode (0x00000143) 
Script returned 77
failed to stop daemon, no pid file: /home/pi/tssSetup/tpm2-tss/test/integration/esys-certifyX509.int_simulator.pid
SKIP test/integration/esys-certifyX509.int (exit status: 77)

FAIL: test/integration/esys-get-capability-act
==============================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:host=,port=
Execute the test script
WARNING:esys:src/tss2-esys/api/Esys_GetCapability.c:303:Esys_GetCapability_Finish() Received TPM Error 
ERROR:esys:src/tss2-esys/api/Esys_GetCapability.c:107:Esys_GetCapability() Esys Finish ErrorCode (0x000001c4) 
ERROR:test:test/integration/esys-get-capability-act.int.c:39:test_esys_get_capability_act() Error esys get capability ErrorCode (0x000001c4) 
Script returned 1
failed to stop daemon, no pid file: /home/pi/tssSetup/tpm2-tss/test/integration/esys-get-capability-act.int_simulator.pid
FAIL test/integration/esys-get-capability-act.int (exit status: 1)

SKIP: test/integration/esys-audit
=================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:host=,port=
Execute the test script
WARNING:esys:src/tss2-esys/api/Esys_GetCommandAuditDigest.c:329:Esys_GetCommandAuditDigest_Finish() Received TPM Error 
ERROR:esys:src/tss2-esys/api/Esys_GetCommandAuditDigest.c:108:Esys_GetCommandAuditDigest() Esys Finish ErrorCode (0x00000143) 
WARNING:test:test/integration/esys-audit.int.c:196:test_esys_audit() Command TPM2_GetCommandAuditDigest not supported by TPM. 
Script returned 77
failed to stop daemon, no pid file: /home/pi/tssSetup/tpm2-tss/test/integration/esys-audit.int_simulator.pid
SKIP test/integration/esys-audit.int (exit status: 77)

SKIP: test/integration/esys-duplicate
=====================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:host=,port=
Execute the test script
WARNING:esys:src/tss2-esys/api/Esys_Rewrap.c:331:Esys_Rewrap_Finish() Received TPM Error 
ERROR:esys:src/tss2-esys/api/Esys_Rewrap.c:109:Esys_Rewrap() Esys Finish ErrorCode (0x00000143) 
WARNING:test:test/integration/esys-duplicate.int.c:410:test_esys_duplicate() Command TPM2_Rewrap not supported by TPM. 
Script returned 77
failed to stop daemon, no pid file: /home/pi/tssSetup/tpm2-tss/test/integration/esys-duplicate.int_simulator.pid
SKIP test/integration/esys-duplicate.int (exit status: 77)

SKIP: test/integration/esys-encrypt-decrypt
===========================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:host=,port=
Execute the test script
WARNING:esys:src/tss2-esys/api/Esys_EncryptDecrypt.c:328:Esys_EncryptDecrypt_Finish() Received TPM Error 
ERROR:esys:src/tss2-esys/api/Esys_EncryptDecrypt.c:110:Esys_EncryptDecrypt() Esys Finish ErrorCode (0x00000143) 
WARNING:test:test/integration/esys-encrypt-decrypt.int.c:278:test_esys_encrypt_decrypt() Command TPM2_EncryptDecrypt not supported by TPM. 
Script returned 77
failed to stop daemon, no pid file: /home/pi/tssSetup/tpm2-tss/test/integration/esys-encrypt-decrypt.int_simulator.pid
SKIP test/integration/esys-encrypt-decrypt.int (exit status: 77)

SKIP: test/integration/esys-encrypt-decrypt2
============================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:host=,port=
Execute the test script
WARNING:esys:src/tss2-esys/api/Esys_EncryptDecrypt2.c:322:Esys_EncryptDecrypt2_Finish() Received TPM Error 
ERROR:esys:src/tss2-esys/api/Esys_EncryptDecrypt2.c:107:Esys_EncryptDecrypt2() Esys Finish ErrorCode (0x00000143) 
WARNING:test:test/integration/esys-encrypt-decrypt.int.c:278:test_esys_encrypt_decrypt() Command TPM2_EncryptDecrypt not supported by TPM. 
Script returned 77
failed to stop daemon, no pid file: /home/pi/tssSetup/tpm2-tss/test/integration/esys-encrypt-decrypt2.int_simulator.pid
SKIP test/integration/esys-encrypt-decrypt2.int (exit status: 77)

SKIP: test/integration/esys-pcr-auth-value
==========================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:host=,port=
Execute the test script
WARNING:esys:src/tss2-esys/api/Esys_PCR_SetAuthValue.c:287:Esys_PCR_SetAuthValue_Finish() Received TPM Error 
ERROR:esys:src/tss2-esys/api/Esys_PCR_SetAuthValue.c:98:Esys_PCR_SetAuthValue() Esys Finish ErrorCode (0x00000143) 
WARNING:test:test/integration/esys-pcr-auth-value.int.c:66:test_esys_pcr_auth_value() Command TPM2_PCR_SetAuthValue not supported by TPM. 
Script returned 77
failed to stop daemon, no pid file: /home/pi/tssSetup/tpm2-tss/test/integration/esys-pcr-auth-value.int_simulator.pid
SKIP test/integration/esys-pcr-auth-value.int (exit status: 77)

SKIP: test/integration/esys-policy-physical-presence-opt
========================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:host=,port=
Execute the test script
WARNING:esys:src/tss2-esys/api/Esys_PolicyPhysicalPresence.c:283:Esys_PolicyPhysicalPresence_Finish() Received TPM Error 
ERROR:esys:src/tss2-esys/api/Esys_PolicyPhysicalPresence.c:98:Esys_PolicyPhysicalPresence() Esys Finish ErrorCode (0x00000143) 
WARNING:test:test/integration/esys-policy-physical-presence-opt.int.c:117:test_esys_policy_physical_presence_opt() Command TPM2_PolicyPhysicalPresence  not supported by TPM. 
Script returned 77
failed to stop daemon, no pid file: /home/pi/tssSetup/tpm2-tss/test/integration/esys-policy-physical-presence-opt.int_simulator.pid
SKIP test/integration/esys-policy-physical-presence-opt.int (exit status: 77)

SKIP: test/integration/esys-pp-commands
=======================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:host=,port=
Execute the test script
WARNING:esys:src/tss2-esys/api/Esys_PP_Commands.c:301:Esys_PP_Commands_Finish() Received TPM Error 
ERROR:esys:src/tss2-esys/api/Esys_PP_Commands.c:104:Esys_PP_Commands() Esys Finish ErrorCode (0x00000143) 
WARNING:test:test/integration/esys-pp-commands.int.c:56:test_esys_pp_commands() Command TPM2_PP_Commands not supported by TPM. 
ERROR:test:test/integration/esys-pp-commands.int.c:70:test_esys_pp_commands() Error: PP_Commands ErrorCode (0x00000143) 
Script returned 77
failed to stop daemon, no pid file: /home/pi/tssSetup/tpm2-tss/test/integration/esys-pp-commands.int_simulator.pid
SKIP test/integration/esys-pp-commands.int (exit status: 77)

SKIP: test/integration/esys-zgen-2phase
=======================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:host=,port=
Execute the test script
WARNING:esys:src/tss2-esys/api/Esys_EC_Ephemeral.c:283:Esys_EC_Ephemeral_Finish() Received TPM Error 
ERROR:esys:src/tss2-esys/api/Esys_EC_Ephemeral.c:98:Esys_EC_Ephemeral() Esys Finish ErrorCode (0x00000143) 
WARNING:test:test/integration/esys-zgen-2phase.int.c:166:test_esys_zgen_2phase() Command TPM2_Ephemeral not supported by TPM. 
ERROR:test:test/integration/esys-zgen-2phase.int.c:219:test_esys_zgen_2phase() 
Error Code: 143
 
Script returned 77
failed to stop daemon, no pid file: /home/pi/tssSetup/tpm2-tss/test/integration/esys-zgen-2phase.int_simulator.pid
SKIP test/integration/esys-zgen-2phase.int (exit status: 77)

SKIP: test/integration/fapi-data-crypt
======================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
Execute the test script
info:test:test/integration/main-fapi.c:341:init_fapi() Using config:
{
     "profile_name": "P_ECC",
     "profile_dir": "./test/data/fapi/",
     "user_dir": "/tmp/fapi_tmpdir.jT3DD0/user/dir",
     "system_dir": "/tmp/fapi_tmpdir.jT3DD0/system_dir",
     "system_pcrs" : [],
     "log_dir" : "/tmp/fapi_tmpdir.jT3DD0",
     "tcti": "device:/dev/tpm0",
}
 
WARNING:fapi:src/tss2-fapi/ifapi_io.c:340:ifapi_io_check_create_dir() Directory /tmp/fapi_tmpdir.jT3DD0/user/dir does not exist, creating 
WARNING:fapi:src/tss2-fapi/ifapi_io.c:340:ifapi_io_check_create_dir() Directory /tmp/fapi_tmpdir.jT3DD0/system_dir/policy does not exist, creating 
ERROR:fapi:src/tss2-fapi/api/Fapi_Encrypt.c:332:Fapi_Encrypt_Finish() ErrorCode (0x00060002) ECC Encryption not yet supported 
ERROR:fapi:src/tss2-fapi/api/Fapi_Encrypt.c:126:Fapi_Encrypt() ErrorCode (0x00060002) Data_Encrypt 
ERROR:fapi:src/tss2-fapi/api/Fapi_Delete.c:405:Fapi_Delete_Async() ErrorCode (0x00060034) FAPI not provisioned. 
ERROR:fapi:src/tss2-fapi/api/Fapi_Delete.c:313:Fapi_Delete() ErrorCode (0x00060034) Entity_Delete 
info:test:test/integration/main-fapi.c:432:main() Test returned 77 
Script returned 77
SKIP test/integration/fapi-data-crypt.fint (exit status: 77)

SKIP: test/integration/fapi-data-crypt-persistent
=================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
Execute the test script
info:test:test/integration/main-fapi.c:341:init_fapi() Using config:
{
     "profile_name": "P_ECC",
     "profile_dir": "./test/data/fapi/",
     "user_dir": "/tmp/fapi_tmpdir.Dsny2F/user/dir",
     "system_dir": "/tmp/fapi_tmpdir.Dsny2F/system_dir",
     "system_pcrs" : [],
     "log_dir" : "/tmp/fapi_tmpdir.Dsny2F",
     "tcti": "device:/dev/tpm0",
}
 
WARNING:fapi:src/tss2-fapi/ifapi_io.c:340:ifapi_io_check_create_dir() Directory /tmp/fapi_tmpdir.Dsny2F/user/dir does not exist, creating 
WARNING:fapi:src/tss2-fapi/ifapi_io.c:340:ifapi_io_check_create_dir() Directory /tmp/fapi_tmpdir.Dsny2F/system_dir/policy does not exist, creating 
ERROR:fapi:src/tss2-fapi/api/Fapi_Encrypt.c:332:Fapi_Encrypt_Finish() ErrorCode (0x00060002) ECC Encryption not yet supported 
WARNING:esys:src/tss2-esys/api/Esys_FlushContext.c:234:Esys_FlushContext_Finish() Received TPM Error 
ERROR:esys:src/tss2-esys/api/Esys_FlushContext.c:89:Esys_FlushContext() Esys Finish ErrorCode (0x000001c4) 
ERROR:fapi:src/tss2-fapi/api/Fapi_Encrypt.c:126:Fapi_Encrypt() ErrorCode (0x00060002) Data_Encrypt 
ERROR:fapi:src/tss2-fapi/api/Fapi_Delete.c:405:Fapi_Delete_Async() ErrorCode (0x00060034) FAPI not provisioned. 
ERROR:fapi:src/tss2-fapi/api/Fapi_Delete.c:313:Fapi_Delete() ErrorCode (0x00060034) Entity_Delete 
info:test:test/integration/main-fapi.c:432:main() Test returned 77 
Script returned 77
SKIP test/integration/fapi-data-crypt-persistent.fint (exit status: 77)

FAIL: test/integration/fapi-data-crypt-rsa
==========================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
Execute the test script
info:test:test/integration/main-fapi.c:341:init_fapi() Using config:
{
     "profile_name": "P_RSA",
     "profile_dir": "./test/data/fapi/",
     "user_dir": "/tmp/fapi_tmpdir.PWfnpm/user/dir",
     "system_dir": "/tmp/fapi_tmpdir.PWfnpm/system_dir",
     "system_pcrs" : [],
     "log_dir" : "/tmp/fapi_tmpdir.PWfnpm",
     "tcti": "device:/dev/tpm0",
}
 
WARNING:fapi:src/tss2-fapi/ifapi_io.c:340:ifapi_io_check_create_dir() Directory /tmp/fapi_tmpdir.PWfnpm/user/dir does not exist, creating 
WARNING:fapi:src/tss2-fapi/ifapi_io.c:340:ifapi_io_check_create_dir() Directory /tmp/fapi_tmpdir.PWfnpm/system_dir/policy does not exist, creating 
ERROR:fapi:src/tss2-fapi/api/Fapi_Provision.c:999:Fapi_Provision_Finish() ErrorCode (0x0006000b) SRK persistent handle already defined 
WARNING:fapi:src/tss2-fapi/ifapi_io.c:428:ifapi_io_remove_directories() Removing: /tmp/fapi_tmpdir.PWfnpm/system_dir/P_RSA/HE/EK/object.json 
ERROR:fapi:src/tss2-fapi/api/Fapi_Provision.c:168:Fapi_Provision() ErrorCode (0x0006000b) Provision 
ERROR:test:test/integration/fapi-data-crypt.int.c:212:test_fapi_data_crypt() Error Fapi_Provision ErrorCode (0x0006000b) 
ERROR:fapi:src/tss2-fapi/api/Fapi_Delete.c:405:Fapi_Delete_Async() ErrorCode (0x00060034) FAPI not provisioned. 
ERROR:fapi:src/tss2-fapi/api/Fapi_Delete.c:313:Fapi_Delete() ErrorCode (0x00060034) Entity_Delete 
ERROR:fapi:src/tss2-fapi/api/Fapi_Delete.c:405:Fapi_Delete_Async() ErrorCode (0x00060034) FAPI not provisioned. 
ERROR:fapi:src/tss2-fapi/api/Fapi_Delete.c:313:Fapi_Delete() ErrorCode (0x00060034) Entity_Delete 
info:test:test/integration/main-fapi.c:432:main() Test returned 1 
Script returned 1
FAIL test/integration/fapi-data-crypt-rsa.fint (exit status: 1)

FAIL: test/integration/fapi-data-crypt-rsa-persistent
=====================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
Execute the test script
info:test:test/integration/main-fapi.c:341:init_fapi() Using config:
{
     "profile_name": "P_RSA",
     "profile_dir": "./test/data/fapi/",
     "user_dir": "/tmp/fapi_tmpdir.mJoI4w/user/dir",
     "system_dir": "/tmp/fapi_tmpdir.mJoI4w/system_dir",
     "system_pcrs" : [],
     "log_dir" : "/tmp/fapi_tmpdir.mJoI4w",
     "tcti": "device:/dev/tpm0",
}
 
WARNING:fapi:src/tss2-fapi/ifapi_io.c:340:ifapi_io_check_create_dir() Directory /tmp/fapi_tmpdir.mJoI4w/user/dir does not exist, creating 
WARNING:fapi:src/tss2-fapi/ifapi_io.c:340:ifapi_io_check_create_dir() Directory /tmp/fapi_tmpdir.mJoI4w/system_dir/policy does not exist, creating 
ERROR:fapi:src/tss2-fapi/api/Fapi_Provision.c:999:Fapi_Provision_Finish() ErrorCode (0x0006000b) SRK persistent handle already defined 
WARNING:fapi:src/tss2-fapi/ifapi_io.c:428:ifapi_io_remove_directories() Removing: /tmp/fapi_tmpdir.mJoI4w/system_dir/P_RSA/HE/EK/object.json 
ERROR:fapi:src/tss2-fapi/api/Fapi_Provision.c:168:Fapi_Provision() ErrorCode (0x0006000b) Provision 
ERROR:test:test/integration/fapi-data-crypt.int.c:212:test_fapi_data_crypt() Error Fapi_Provision ErrorCode (0x0006000b) 
ERROR:fapi:src/tss2-fapi/api/Fapi_Delete.c:405:Fapi_Delete_Async() ErrorCode (0x00060034) FAPI not provisioned. 
ERROR:fapi:src/tss2-fapi/api/Fapi_Delete.c:313:Fapi_Delete() ErrorCode (0x00060034) Entity_Delete 
ERROR:fapi:src/tss2-fapi/api/Fapi_Delete.c:405:Fapi_Delete_Async() ErrorCode (0x00060034) FAPI not provisioned. 
ERROR:fapi:src/tss2-fapi/api/Fapi_Delete.c:313:Fapi_Delete() ErrorCode (0x00060034) Entity_Delete 
info:test:test/integration/main-fapi.c:432:main() Test returned 1 
Script returned 1
FAIL test/integration/fapi-data-crypt-rsa-persistent.fint (exit status: 1)

FAIL: test/integration/fapi-get-esys-blobs
==========================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
Execute the test script
info:test:test/integration/main-fapi.c:341:init_fapi() Using config:
{
     "profile_name": "P_ECC",
     "profile_dir": "./test/data/fapi/",
     "user_dir": "/tmp/fapi_tmpdir.SuDsrZ/user/dir",
     "system_dir": "/tmp/fapi_tmpdir.SuDsrZ/system_dir",
     "system_pcrs" : [],
     "log_dir" : "/tmp/fapi_tmpdir.SuDsrZ",
     "tcti": "device:/dev/tpm0",
}
 
WARNING:fapi:src/tss2-fapi/ifapi_io.c:340:ifapi_io_check_create_dir() Directory /tmp/fapi_tmpdir.SuDsrZ/user/dir does not exist, creating 
WARNING:fapi:src/tss2-fapi/ifapi_io.c:340:ifapi_io_check_create_dir() Directory /tmp/fapi_tmpdir.SuDsrZ/system_dir/policy does not exist, creating 
ERROR:test:test/integration/fapi-get-esys-blobs.int.c:198:test_fapi_get_esys_blobs() Invalid type 
info:test:test/integration/main-fapi.c:432:main() Test returned 1 
Script returned 1
FAIL test/integration/fapi-get-esys-blobs.fint (exit status: 1)

FAIL: test/integration/fapi-key-create2-sign
============================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
Execute the test script
info:test:test/integration/main-fapi.c:341:init_fapi() Using config:
{
     "profile_name": "P_ECC",
     "profile_dir": "./test/data/fapi/",
     "user_dir": "/tmp/fapi_tmpdir.mmPoh0/user/dir",
     "system_dir": "/tmp/fapi_tmpdir.mmPoh0/system_dir",
     "system_pcrs" : [],
     "log_dir" : "/tmp/fapi_tmpdir.mmPoh0",
     "tcti": "device:/dev/tpm0",
}
 
WARNING:fapi:src/tss2-fapi/ifapi_io.c:340:ifapi_io_check_create_dir() Directory /tmp/fapi_tmpdir.mmPoh0/user/dir does not exist, creating 
WARNING:fapi:src/tss2-fapi/ifapi_io.c:340:ifapi_io_check_create_dir() Directory /tmp/fapi_tmpdir.mmPoh0/system_dir/policy does not exist, creating 
WARNING:esys:src/tss2-esys/api/Esys_Create.c:398:Esys_Create_Finish() Received TPM Error 
ERROR:fapi:src/tss2-fapi/fapi_util.c:3437:ifapi_key_create() ErrorCode (0x0000018a) Key create finish 
ERROR:fapi:src/tss2-fapi/api/Fapi_CreateKey.c:283:Fapi_CreateKey_Finish() Key create ErrorCode (0x0000018a) 
ERROR:fapi:src/tss2-fapi/api/Fapi_CreateKey.c:116:Fapi_CreateKey() ErrorCode (0x0000018a) Key_Create 
WARNING:esys:src/tss2-esys/api/Esys_PolicyPCR.c:288:Esys_PolicyPCR_Finish() Received TPM Error 
ERROR:fapi:src/tss2-fapi/ifapi_policy_execute.c:221:execute_policy_pcr() ErrorCode (0x000001c4) Execute PolicyPCR_Finish. 
ERROR:fapi:src/tss2-fapi/ifapi_policy_execute.c:1490:execute_policy_element() ErrorCode (0x000001c4) Execute policy pcr 
ERROR:fapi:src/tss2-fapi/ifapi_policy_execute.c:1722:ifapi_policyeval_execute() Execute policy. ErrorCode (0x000001c4) 
ERROR:fapi:src/tss2-fapi/ifapi_policyutil_execute.c:296:ifapi_policyutil_execute() Execute policy. ErrorCode (0x000001c4) 
ERROR:fapi:src/tss2-fapi/ifapi_policy_callbacks.c:1273:ifapi_exec_auth_policy() Execute policy. ErrorCode (0x000001c4) 
ERROR:fapi:src/tss2-fapi/ifapi_policy_execute.c:614:execute_policy_authorize() Execute authorized policy. ErrorCode (0x000001c4) 
ERROR:fapi:src/tss2-fapi/ifapi_policy_execute.c:1514:execute_policy_element() ErrorCode (0x000001c4) Execute policy authorize 
ERROR:esys:src/tss2-esys/esys_iutil.c:1096:esys_GetResourceObject() Error: Esys handle does not exist (70018). 
ERROR:esys:src/tss2-esys/api/Esys_FlushContext.c:138:Esys_FlushContext_Async() flushHandle unknown. ErrorCode (0x00070018) 
ERROR:esys:src/tss2-esys/api/Esys_FlushContext.c:66:Esys_FlushContext() Error in async function ErrorCode (0x00070018) 
ERROR:fapi:src/tss2-fapi/ifapi_policy_execute.c:1722:ifapi_policyeval_execute() Execute policy. ErrorCode (0x000001c4) 
ERROR:fapi:src/tss2-fapi/ifapi_policyutil_execute.c:296:ifapi_policyutil_execute() Execute policy. ErrorCode (0x000001c4) 
ERROR:fapi:src/tss2-fapi/fapi_util.c:2115:ifapi_authorize_object() Execute policy. ErrorCode (0x000001c4) 
ERROR:fapi:src/tss2-fapi/fapi_util.c:1909:ifapi_load_key_finish() ErrorCode (0x000001c4) Authorize key. 
ERROR:fapi:src/tss2-fapi/fapi_util.c:1717:ifapi_load_keys_finish() Load keys ErrorCode (0x000001c4) 
ERROR:fapi:src/tss2-fapi/fapi_util.c:2730:ifapi_load_key() ErrorCode (0x000001c4)  Load key. 
ERROR:fapi:src/tss2-fapi/api/Fapi_Sign.c:288:Fapi_Sign_Finish() Fapi load key. ErrorCode (0x000001c4) 
ERROR:esys:src/tss2-esys/esys_iutil.c:1096:esys_GetResourceObject() Error: Esys handle does not exist (70018). 
ERROR:esys:src/tss2-esys/api/Esys_FlushContext.c:138:Esys_FlushContext_Async() flushHandle unknown. ErrorCode (0x00070018) 
ERROR:esys:src/tss2-esys/api/Esys_FlushContext.c:66:Esys_FlushContext() Error in async function ErrorCode (0x00070018) 
ERROR:fapi:src/tss2-fapi/api/Fapi_Sign.c:130:Fapi_Sign() ErrorCode (0x000001c4) Key_Sign 
info:test:test/integration/main-fapi.c:432:main() Test returned 0 
Script returned 0
TPM changed state during test
State before (/home/pi/tssSetup/tpm2-tss/test/integration/fapi-key-create2-sign.fint_state1):
cap0: 0000000500000002000403ffffff000b03ffffff00
cap1: 0000000100000018000000000000000100000002000000030000000400000005000000060000000700000008000000090000000a0000000b0000000c0000000d0000000e0000000f000000100000001100000012000000130000001400000015000000160000001700
cap2: 000000010000000000
cap3: 000000010000000000
cap4: 000000010000000000
cap5: 000000010000000381000001810001008101000100
cap6: 000000010000000201c0000201c0000a00
State after (/home/pi/tssSetup/tpm2-tss/test/integration/fapi-key-create2-sign.fint_state2):
cap0: 0000000500000002000403ffffff000b03ffffff00
cap1: 0000000100000018000000000000000100000002000000030000000400000005000000060000000700000008000000090000000a0000000b0000000c0000000d0000000e0000000f000000100000001100000012000000130000001400000015000000160000001700
cap2: 000000010000000000
cap3: 000000010000000000
cap4: 00000001000000018000000200
cap5: 000000010000000381000001810001008101000100
cap6: 000000010000000201c0000201c0000a00
FAIL test/integration/fapi-key-create2-sign.fint (exit status: 1)

ERROR: test/integration/fapi-key-create-null-key-sign
=====================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-key-create-null-key-sign.fint (exit status: 99)

ERROR: test/integration/fapi-key-create-sign-persistent-key
===========================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-key-create-sign-persistent-key.fint (exit status: 99)

ERROR: test/integration/fapi-key-create-sign-password-provision
===============================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-key-create-sign-password-provision.fint (exit status: 99)

ERROR: test/integration/fapi-key-create-sign-rsa
================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-key-create-sign-rsa.fint (exit status: 99)

ERROR: test/integration/fapi-key-create-policy-authorize-sign
=============================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-key-create-policy-authorize-sign.fint (exit status: 99)

ERROR: test/integration/fapi-key-create-policy-authorize-rsa-pem-sign
=====================================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-key-create-policy-authorize-rsa-pem-sign.fint (exit status: 99)

ERROR: test/integration/fapi-key-create-policy-authorize-ecc-pem-sign
=====================================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-key-create-policy-authorize-ecc-pem-sign.fint (exit status: 99)

ERROR: test/integration/fapi-key-create-policy-authorize-sign-rsa
=================================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-key-create-policy-authorize-sign-rsa.fint (exit status: 99)

ERROR: test/integration/fapi-key-create-policy-authorize-nv-sign
================================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-key-create-policy-authorize-nv-sign.fint (exit status: 99)

ERROR: test/integration/fapi-key-create-policy-secret-nv-sign
=============================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-key-create-policy-secret-nv-sign.fint (exit status: 99)

ERROR: test/integration/fapi-key-create-policy-pcr-sign
=======================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-key-create-policy-pcr-sign.fint (exit status: 99)

ERROR: test/integration/fapi-key-create-policy-signed
=====================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-key-create-policy-signed.fint (exit status: 99)

ERROR: test/integration/fapi-key-create-policy-signed-ecc
=========================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-key-create-policy-signed-ecc.fint (exit status: 99)

ERROR: test/integration/fapi-key-create-policy-nv-sign
======================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-key-create-policy-nv-sign.fint (exit status: 99)

ERROR: test/integration/fapi-key-create-policy-nv-counter-sign
==============================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-key-create-policy-nv-counter-sign.fint (exit status: 99)

ERROR: test/integration/fapi-key-create-policy-or-sign
======================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-key-create-policy-or-sign.fint (exit status: 99)

ERROR: test/integration/fapi-key-create-policy-password-sign
============================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-key-create-policy-password-sign.fint (exit status: 99)

ERROR: test/integration/fapi-key-create-policy-countertimer-sign
================================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-key-create-policy-countertimer-sign.fint (exit status: 99)

ERROR: test/integration/fapi-key-create-policy-physical-presence-sign
=====================================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-key-create-policy-physical-presence-sign.fint (exit status: 99)

ERROR: test/integration/fapi-key-create-policy-locality-sign
============================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-key-create-policy-locality-sign.fint (exit status: 99)

ERROR: test/integration/fapi-key-create-policy-command-code-sign
================================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-key-create-policy-command-code-sign.fint (exit status: 99)

ERROR: test/integration/fapi-key-create-policy-auth-value-sign
==============================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-key-create-policy-auth-value-sign.fint (exit status: 99)

ERROR: test/integration/fapi-key-create-ckda-sign
=================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-key-create-ckda-sign.fint (exit status: 99)

ERROR: test/integration/fapi-key-change-auth
============================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-key-change-auth.fint (exit status: 99)

ERROR: test/integration/fapi-key-create-sign-persistent
=======================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-key-create-sign-persistent.fint (exit status: 99)

ERROR: test/integration/fapi-key-create-sign-password
=====================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-key-create-sign-password.fint (exit status: 99)

ERROR: test/integration/fapi-key-create-ckda-sign-password
==========================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-key-create-ckda-sign-password.fint (exit status: 99)

ERROR: test/integration/fapi-key-create-sign-password-da
========================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-key-create-sign-password-da.fint (exit status: 99)

ERROR: test/integration/fapi-key-create-ckda-sign-password-da
=============================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-key-create-ckda-sign-password-da.fint (exit status: 99)

ERROR: test/integration/fapi-nv-authorizenv-cphash
==================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-nv-authorizenv-cphash.fint (exit status: 99)

ERROR: test/integration/fapi-nv-ordinary
========================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-nv-ordinary.fint (exit status: 99)

ERROR: test/integration/fapi-nv-written-policy
==============================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-nv-written-policy.fint (exit status: 99)

ERROR: test/integration/fapi-nv-extend
======================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-nv-extend.fint (exit status: 99)

ERROR: test/integration/fapi-nv-increment
=========================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-nv-increment.fint (exit status: 99)

ERROR: test/integration/fapi-nv-set-bits
========================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-nv-set-bits.fint (exit status: 99)

ERROR: test/integration/fapi-pcr-test
=====================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-pcr-test.fint (exit status: 99)

ERROR: test/integration/fapi-quote
==================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-quote.fint (exit status: 99)

ERROR: test/integration/fapi-quote-with-primary
===============================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-quote-with-primary.fint (exit status: 99)

ERROR: test/integration/fapi-quote-rsa
======================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-quote-rsa.fint (exit status: 99)

ERROR: test/integration/fapi-policy-or-nv-read-write
====================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-policy-or-nv-read-write.fint (exit status: 99)

ERROR: test/integration/fapi-second-provisioning
================================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-second-provisioning.fint (exit status: 99)

ERROR: test/integration/fapi-provisioning-error
===============================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-provisioning-error.fint (exit status: 99)

ERROR: test/integration/fapi-info
=================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-info.fint (exit status: 99)

ERROR: test/integration/fapi-unseal
===================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-unseal.fint (exit status: 99)

ERROR: test/integration/fapi-unseal-persistent
==============================================

TPM20TEST_TCTI_NAME=device
TPM20TEST_DEVICE_FILE=/dev/tpm0
TPM20TEST_SOCKET_ADDRESS=
TPM20TEST_SOCKET_PORT=
TPM20TEST_TCTI=device:/dev/tpm0
ERROR:test:test/helper/tpm_transientempty.c:54:main() TPM contains transient entries 
ERROR:test:test/helper/tpm_transientempty.c:56:main() Handle 80000002 
TPM transient area not empty => skipping
ERROR test/integration/fapi-unseal-persistent.fint (exit status: 99)

Analysis:

All unit tests pass.
I think, by reading up, that the failures I get in the esys integration tests are normal.
I raised an issue on github, to check with the experts.
There are a 4 failures in the fapi integration tests.
Then, there are a number of errors. But those are because the last failing test leaves the TPM in a status that's not ok for the next tests.

image
this image is edited, I removed passing tests inbetween

For reference, this is how a test looks like when I force the TPM to be unavailable by pressing the reset on the EVM (I skipped optional tests here, that's why the total count is lower):

image
results when the TPM IC is deliberately disabled, unit test, integration, mandatory

Then, after restarting the device, everything is back operational.

image

image
results when the TPM IC is re-enabled, unit test, integration, mandatory

tpm2-abrmd: running integration test 

As with the tpm2-tss package, I'm running the tests on the real hardware TPM chip.

Configure and execute

sudo ./configure --with-dbuspolicydir=/etc/dbus-1/system.d --with-systemdsystemunitdir=/lib/systemd/system --with-systemdpresetdir=/lib/systemd/system-preset --datarootdir=/usr/share --enable-unit --enable-integration --enable-test-hwtpm
sudo make check

Test log:

Fullscreen test-suite_tss_abrmd_202112112344.log Download 
====================================================
   tpm2-abrmd 2.4.0-20-g41fd797: ./test-suite.log
====================================================

# TOTAL: 47
# PASS:  26
# SKIP:  0
# XFAIL: 1
# FAIL:  20
# XPASS: 0
# ERROR: 0

.. contents:: :depth: 2

FAIL: test/integration/auth-session-max
=======================================

Invalid TABRMD_TCTI, got: "" see --help.
FAIL test/integration/auth-session-max.int (exit status: 1)

FAIL: test/integration/auth-session-start-flush
===============================================

Invalid TABRMD_TCTI, got: "" see --help.
FAIL test/integration/auth-session-start-flush.int (exit status: 1)

FAIL: test/integration/auth-session-start-save
==============================================

Invalid TABRMD_TCTI, got: "" see --help.
FAIL test/integration/auth-session-start-save.int (exit status: 1)

FAIL: test/integration/auth-session-start-save-load
===================================================

Invalid TABRMD_TCTI, got: "" see --help.
FAIL test/integration/auth-session-start-save-load.int (exit status: 1)

FAIL: test/integration/max-transient-upperbound
===============================================

Invalid TABRMD_TCTI, got: "" see --help.
FAIL test/integration/max-transient-upperbound.int (exit status: 1)

FAIL: test/integration/get-capability-handles-transient
=======================================================

Invalid TABRMD_TCTI, got: "" see --help.
FAIL test/integration/get-capability-handles-transient.int (exit status: 1)

FAIL: test/integration/manage-transient-keys
============================================

Invalid TABRMD_TCTI, got: "" see --help.
FAIL test/integration/manage-transient-keys.int (exit status: 1)

FAIL: test/integration/session-gap
==================================

Invalid TABRMD_TCTI, got: "" see --help.
FAIL test/integration/session-gap.int (exit status: 1)

FAIL: test/integration/session-load-from-closed-connection
==========================================================

Invalid TABRMD_TCTI, got: "" see --help.
FAIL test/integration/session-load-from-closed-connection.int (exit status: 1)

FAIL: test/integration/session-load-from-closed-connections-lru
===============================================================

Invalid TABRMD_TCTI, got: "" see --help.
FAIL test/integration/session-load-from-closed-connections-lru.int (exit status: 1)

FAIL: test/integration/session-load-from-open-connection
========================================================

Invalid TABRMD_TCTI, got: "" see --help.
FAIL test/integration/session-load-from-open-connection.int (exit status: 1)

XFAIL: test/integration/start-auth-session
==========================================

Invalid TABRMD_TCTI, got: "" see --help.
XFAIL test/integration/start-auth-session.int (exit status: 1)

FAIL: test/integration/tcti-cancel
==================================

Invalid TABRMD_TCTI, got: "" see --help.
FAIL test/integration/tcti-cancel.int (exit status: 1)

FAIL: test/integration/tcti-connections-max
===========================================

Invalid TABRMD_TCTI, got: "" see --help.
FAIL test/integration/tcti-connections-max.int (exit status: 1)

FAIL: test/integration/tcti-double-finalize
===========================================

Invalid TABRMD_TCTI, got: "" see --help.
FAIL test/integration/tcti-double-finalize.int (exit status: 1)

FAIL: test/integration/tcti-set-locality
========================================

Invalid TABRMD_TCTI, got: "" see --help.
FAIL test/integration/tcti-set-locality.int (exit status: 1)

FAIL: test/integration/hash-sequence
====================================

Invalid TABRMD_TCTI, got: "" see --help.
FAIL test/integration/hash-sequence.int (exit status: 1)

FAIL: test/integration/not-enough-handles-for-command
=====================================================

Invalid TABRMD_TCTI, got: "" see --help.
FAIL test/integration/not-enough-handles-for-command.int (exit status: 1)

FAIL: test/integration/password-authorization
=============================================

Invalid TABRMD_TCTI, got: "" see --help.
FAIL test/integration/password-authorization.int (exit status: 1)

FAIL: test/integration/tpm2-command-flush-no-handle
===================================================

Invalid TABRMD_TCTI, got: "" see --help.
FAIL test/integration/tpm2-command-flush-no-handle.int (exit status: 1)

FAIL: test/integration/util-buf-max-upper-bound
===============================================

Invalid TABRMD_TCTI, got: "" see --help.
FAIL test/integration/util-buf-max-upper-bound.int (exit status: 1)

Results:

image

Analyse:

I don't know what's the cause of the failures. I tested with and without the tpm2-abrmd.service running.

tpm2-tss-engine: running unit and integration tests

This one has unit tests similar to tpm2-tss.
When the Access Broker and Resource Manager service is running, there's no access to the raw device. It's in use.
The tests accec the raw character device, so service needs to be stopped before the integration tests.

Build and run test suite

sudo ./configure --enable-debug --enable-integration --enable-unit --with-device=/dev/tpm0
sudo systemctl stop tpm2-abrmd.service
sudo make check
sudo systemctl start tpm2-abrmd.service

Results:

image

Analysis


 WIP