Moxa Technologies UC-8100-LX, Руководство пользователя программного обеспечения, Страница: 42 / 90

UC-8100-LX Software Manual Security On UC-8100-LX
4-6
NOTE Please make sure TPM daemon is running before issuing TPM tool commands, otherwise you will get following
error:
Tspi_Context_Connect failed: 0x00003011 - layer=tsp, code=0011 (17), Communication failure
87B
Initializing the Trusted Platform Module
First step to start using TPM is to take its ownership. This can be done through the following command:
moxa@Moxa:~$ sudo tpm_takeownership
Enter owner password:
Confirm password:
Enter SRK password:
Confirm password:
Enter owner password and SRK password twice as it requested. Notice that owner and SRK passwords which
are very important and must not be lost.
NOTE If you encounter the following error :
Tspi_TPM_GetPubEndorsementKey failed: 0x00000023 - layer=tpm, code=0023 (35), No EKlease make
sure …..
This is because your TPM does not have an Endorsement Key. Then, launch the following command and wait
for it to complete.
sudo tpm_createek
…
ATTENTION
Ownership can only be realized once, any other attempt will fail
Keep your owner/SRK password carefully.
88B
Getting the Public Endorsement Key
The Endorsement Key is typically a 2,048-bit RSA public and private key pair, which is created randomly on the
chip at manufacture time and cannot be changed. The private key never leaves the chip, while the public key
is used for attestation and for encryption of sensitive data sent to the chip.
moxa@Moxa:~$ sudo tpm_getpubek
Tspi_TPM_GetPubEndorsementKey failed: 0x00000008 - layer=tpm, code=0008 (8), The TPM
target command has been disabled
Enter owner password:
Public Endorsement Key:
Version: 01010000
Usage: 0x0002 (Unknown)
Flags: 0x00000000 (!VOLATILE, !MIGRATABLE, !REDIRECTION)
AuthUsage: 0x00 (Never)
Algorithm: 0x00000020 (Unknown)
Encryption Scheme: 0x00000012 (Unknown)
Signature Scheme: 0x00000010 (Unknown)
Public Key:
b1000e32 269ee2bd f2114775 dd553e8a b9bac458 cfd52496 b6dd590b 776e2fd1
4a519f1c e1fe6085 d8365f02 261bc6f0 e1e7f2e0 833da920 970cd588 d1e6939e
3f35a8a8 251f298d 78c46e34 d68ef7cc 7a685d9e baf7f6e5 e3bcc303 163e9e67
395426dc 39c90b37 9aa17f55 6fbea49e 0a76fc01 cafd9062 772112c4 c9207e6c
ebda664c 7a6cbda8 301dcc4c 67dc8f03 9ea8993a 1f9068ec 9757ec8e 26b4c6e2
87e30470 6fbf4ae3 3e32b5b7 dfe55dfc 4da3012d b6a600bb d7eeed48 99c118b5
4950c2f5 1527c78f 12dfcea7 d9dfdc8a 10cd442a d3f17173 784a69c7 9689c822
f364af90 2802bfcd 5a1227c2 3c7d02b0 e7e804a3 abe8034b 3584c529 1265a881