search

fido-device-onboard / client-sdk-fidoiot

This a C-based implementation of the Device component defined in FIDO Device Onboard (FDO) Specification.
Apache License 2.0
20 stars 32 forks source link

Failed to generate device replacement HMAC Key from TPM #285

Open cynex-k opened 6 months ago

cynex-k commented 6 months ago

I have this error just with when I use the TPM device, the DI phase works fine I got this error in the first attempt only in the second I got this :

'./data/mfg_proxy.dat' with proxy info absent
'./data/rv_proxy.dat' with proxy info absent
'./data/owner_proxy.dat' with proxy info absent
Device is ready for Ownership transfer
Maximum supported DeviceServiceInfo size: 8192 bytes
Maximum supported OwnerServiceInfo size: 8192 bytes
Reuse support is enabled
Resale support is enabled
ERROR:esys:src/tss2-esys/esys_tr.c:442:Esys_TR_Close() Error: Esys handle does not exist (0x00070018). 
ERROR:[fdo_tpm_generate_hmac_key():406] Failed to flush persistent handle.
ERROR:[fdo_generate_ov_replacement_hmac_key():273] Failed to generate device replacement HMAC key from TPM.
ERROR:[msg66():82] TO2.DeviceServiceInfoReady: Failed to refresh OV HMAC Key
ERROR:[fdo_process_states():194] Error occurred while processing Type 66
ERROR:[fdo_send_error_message():409] Sending Error Message
ERROR:[_STATE_TO2():1791] TO2 failed.

Delaying for 3 seconds

ERROR:[_STATE_TO2():1833] All RVTO2AddreEntry(s) exhausted. Retrying TO1 using the next RendezvousDirective
*********Retry count : 1*********
ERROR:[msg61():292] TO2.ProveOVHdr: Invalid HMac received over OVHeader
ERROR:[fdo_process_states():194] Error occurred while processing Type 61
ERROR:[fdo_send_error_message():409] Sending Error Message
ERROR:[_STATE_TO2():1791] TO2 failed.

Delaying for 3 seconds

any thing I did wrong ?