[Xense-devel] vTPM problems in Xen

["Fischer, Anna" <anna.fischer@xxxxxx>]

Hi Vinnie, 

I've got some problems with the current vTPM implementation in Xen and I
hope you can help me with that. I'm working with the current
xen-unstable version (downloaded a few days ago). In my DomUs I use the
TPM front-end driver (as built-in) and it seems to come up. In my Dom0
I've got the usual vTPM backend driver that also comes up as far as I
can see in the logs. As TPM device in Dom0 I use the TPM emulator.

Now the problem is that when I start a new DomU it seems as if there's
no new DMI instance coming up. Here's the output of my vtpm_managerd:

[root@Dom0 vtpm_manager]# vtpm_managerd
INFO[VTPM]: Starting VTPM.
INFO[TCS]: Constructing new TCS:
INFO[TCS]: Calling TCS_OpenContext:
INFO[VTSP]: OIAP.
ERROR[VTPM]: Failed to load service data with error = TPM_IOERROR
INFO[VTPM]: Failed to read manager file. Assuming first time
initialization.
INFO[VTSP]: Reading Public EK.
INFO[VTPM]: Failed to readEK meaning TPM has an owner. Creating Keys off
existing SRK.
INFO[VTSP]: Taking Ownership of TPM.
INFO[VTSP]: Disabling Pubek Read.
INFO[VTSP]: OSAP.
INFO[VTSP]: Creating new key of type 20.
INFO[VTSP]: Creating Binding Key...
INFO[VTSP]: OSAP.
INFO[VTSP]: Creating new key of type 20.
INFO[VTSP]: Creating Binding Key...
INFO[VTSP]: Loading Key only into memory.
***************************** FIXME: SAVE NEW STATE *******
INFO[VTPM]: Finished initialized new VTPM manager (Status = 0).
INFO[VTPM]: Enveloping Input[623]: 0xbb a5 d6 4e a1 c3 93 cf 51 2a 41 61
2d 14 23 a1 4d 1a a cf 79 fd ad ab 25 9a 64 d5 8b 57 85 d d9 3e 96 46 52
93 40 be 0 0 2 2f 1 1 0 0 0 14 0 0 0 0 1 0 0 0 1 0 3 0 1 0 0 0 c 0 0 8 0
0 0 0 2 0 0 0 0 0 0 0 0 0 0 1 0 ca 45 bb 9f f7 20 97 e5 43 e4 1d 6d 3d
62 57
24 c7 ec ac 39 7a 39 aa 96 a4 44 a5 37 6 76 5f e7 3f 9f 43 df b7 33 6d 3
81 22 a8 e4 13 ae a af 8a 77 8b 22 b3 b4 1c fd a4 8f d2 73 49 50 ef fe f
64 91 83 4d a8 4 26 57 d3 de 23 d5 75 d4 ec d3 b9 4 f4 84 10 ed 2 14 6c
b3
94 b f2 44 4b 8c 8b ee 10 f6 5b 8d 86 76 2f 8c 23 4f 5c 15 df 4f 95 8a
48
55 33 af a7 42 9b 62 29 21 5b f5 82 ef 32 1a 5b 96 fe e7 70 f 7b 7b 10
b4 cc 6f f0 5f 61 ba de 57 75 b0 30 62 79 e5 1b 5c 4 e3 51 d9 4e ce a3
4a 3b
c1 b8 e0 c 3 4a d9 1 ba 66 ae 90 a9 7f cc 32 99 86 57 13 c9 d1 23 bb 9f
2
33 65 5e 17 da b4 8f c2 f 27 29 37 1 99 41 f8 68 c2 9b 8 63 ee d1 9d e3
36
99 cd 70 86 a6 ff 6f f1 8c 2f 5b d 30 8a f4 76 8c b9 62 3d e4 c3 c1 47
af
66 41 b6 85 14 15 a0 83 c8 f1 c5 10 bf 0 0 1 0 5c 57 b ca 6e 13 fe 20 4f
d6 20 b8 d 39 2 57 c3 64 5e 1e f2 cc 84 1a 72 2d 8b 18 71 2a 7f ab b9 79
3c 95 90 af 7d 42 4c 3d c4 e3 7c 59 12 4b 87 1 1 7 a6 1c e0 d1 f3 52 fa
cf
5 b1 4f 93 44 a1 40 12 4c 9f 2b b9 c5 25 2c 1 b4 32 bc 5f fc 2a 8e c9 d
77 9e 7b 50 e6 8b 5b 3b d0 ef b0 f7 7b 8d ba 2c 0 d9 ee a3 28 a c4 12 8b
bb
e2 44 3f e9 23 7a c5 20 1 38 29 42 0 10 5b a0 6c ab 3c da f2 26 49 6b a4
51 6b 4d 57 d cc 76 d3 3d 9a 4c e0 cd d4 24 33 a2 a 51 c3 28 a1 bb db 6c
c0 19 fe c3 bc df 6 a3 5 28 60 9 ce 32 57 db 91 49 84 ec 98 99 4a c2 9f
56 3c d0 f4 f7 1c c7 1f fe 83 d0 83 80 29 b d6 1b 69 bf a3 55 8e b4 f d1
2d
d3 b3 2f 5a 30 19 88 2a 4b b4 be d8 ec 46 b7 db a7 21 22 3c 95 7a 41 0
49 80 2d eb e4 d4 6b d9 8a 90 6b ae 6b 72 e4 4d 2f f4 56 40 9e bb d9 f8
18 29 3b 4e 62 77 8d a4 bc d5 ef a 26 43 61 80
INFO[VTSP]: Binding 16 bytes of data.
INFO[VTPM]: Saved 256 bytes of E(symkey) + 640 bytes of E(data)
INFO[VTPM]: Enveloping Output[904]: 0x0 0 1 0 44 ea 32 b0 c1 d1 f9 67 45
68 6d 76 3d c8 81 ae 42 a6 d9 90 10 d4 2e e9 11 c6 de 22 a8 ce 55 2d ee
c6
9 a9 52 48 6d 79 2d 59 99 41 2e b9 f5 2d 1 64 27 2a 14 b2 88 58 a1 eb 76
25 4c c4 d1 ff ee ea 58 ad c4 28 6b 16 41 1 59 2f 78 fd c4 a4 93 8b 54
d5
47 e4 90 8a 35 d6 2e 35 e4 1d de f4 c0 74 a7 c3 33 ed 4e 13 c3 a6 fd 2a
12
e8 50 15 e6 79 f2 10 4a 5d 3e dc 4b 19 90 e2 99 3a 61 4e 7d 7f 53 5e 7c
fb ba f7 af fc c3 1b 78 75 9d c2 d4 a8 e6 69 53 68 7a 3d 7e a5 5d d5 26
e4 7f 8a eb e7 5e 0 b0 be f4 e0 2b 47 4 9a 3e c5 4f 7a da 57 91 f6 32 ba
c8 ff ca 18 ac f2 7e b2 14 60 4f 3c e5 43 64 2b f3 2c 8e af b9 45 43 bc
5c d4 33
c3 77 a2 dd d4 14 67 9c 70 b1 57 f c 6c 12 fe d8 c4 85 3f fc e9 3b 11 1d
f6 92 76 fc 66 de 3e f 1 bf bf 68 13 61 99 14 27 2 7f df 2b 1 0 0 2 80 0
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 5d 23 bb 7 5a af c5 8a 9 41 dd 94 d 50 f4
7 98
c6 4a 53 b1 c4 db 4a 54 c1 2b b8 9c 7a 6f b5 9 5b 28 bd 62 cb 64 3e 15
ac 4e dc 6e 5a b7 ea 1e f 81 88 f4 f5 6e b1 c7 a2 46 3a 3c de 84 e3 58
3e c1
b5 f5 eb b8 4a 3e 2e 4b d4 9f 52 97 2b 6b d5 20 14 cd c6 58 ce a 36 75
d4
c2 3f 1b 5c 49 c7 ff 6a ca 9b de 38 3b 85 71 da 91 d3 9a 28 5a 5a 6f 4d
9d ca ce 42 c8 32 cb 82 c1 5b db 79 27 76 86 19 cb f8 83 4a dd c6 8e 94
b4 6b 3f d9 d6 a3 f6 13 8 c7 f3 d 7 68 58 ed d4 56 74 35 3c a8 96 c8 dd
e 76 e8 9b 8 b 1 84 90 2c 7d 6a 22 94 3a 93 fc 9d 8c 88 3c 38 d8 2c e3
bd e4 95 77 dd 11 c7 fd cc 2b 69 85 f0 ec 7d 7f b0 92 2b ad b0 6a 9a 49
dd 2b df 8d 13 4e c4 81 9 d9 b7 b4 32 f8 b6 e7 3f 4f 80 9e 2 9a 0 79 97
7b c5 50 7b 82 98 cc 3e 6d f9 4f ab 61 c8 99 c8 da 2f 7d 98 fc b3 2b 6d
ac 6b 2c 4 d0 60 b bf b8 9b 1a 22 8 d1 85 58 6a f5 6c 67 50 c2 9a 4c ed
78 94 29 38 a1 e8 c0
93 d 29 98 9c 57 1b b6 fa 47 8f 39 6e 39 c6 b0 be 6b 5e 45 27 12 a6 6 76
cc 57 31 e8 20 73 37 7c c9 30 2f b9 24 c 45 50 c4 72 c5 a7 5f b4 b3 f1
86
59 7 3f b9 2a 11 b6 ef f8 b2 37 99 1e c6 9 9e 70 a7 56 98 28 d7 28 34 9e
22 a4 5c 44 76 b1 b9 d e8 b9 41 ed ff 7e cf f1 44 d3 4a 21 d5 82 b5 97
90
79 e8 35 99 7 3c e7 91 a1 16 c8 45 7b 94 31 50 93 1d 37 e0 83 ff af 40
60
e5 c2 74 60 4e 6f c9 7f 39 66 c5 e1 8b b ee 3f 14 44 c5 c 5a 58 52 e5 35
ae 9d 63 39 fb d 6a 68 ec 4b ab d5 fe 65 ba c1 a9 1c aa 18 89 8e 5a d3
2c
b6 85 a0 dd d4 10 8c a2 87 49 b1 5 5c ad 99 29 25 ef e3 35 84 81 3 53 78
92 4c b1 4b 34 b2 64 fb 86 ce 5a f3 f7 50 65 46 e5 a b4 58 6 cc de 31 15
64 9e ef a2 a4 24 13 36 7b 3a 43 93 4e 79 22 e9 32 38 a5 5b 65 63 af 75
c1
c3 54 51 2e 31 ae 8d 4b fe cf a1 fd d6 a1 4 1d b8 94 d 23 90 98 1d d0 6d
7b 77 17 82 fe 49 db d2 50 4b 52 a3 24 72 a6 de fd a8 67 55 dc ae 3c 77
72 ba 4c d2 e9 6b 93 67 59 2b f8 2 3c 1e 9e 8 fd f6 c2 af ba 36 fc ff 16
f9 4f 9e f8 90
INFO[VTPM]: Saved VTPM Manager state (status = 0, dmis = -1)
INFO[VTSP]: Loading Key into TPM.
INFO[VTPM]: Creating new DMI instance 0 attached on domain 0.
INFO[TCS]: Calling TCS_OpenContext:
INFO[VTPM]: [Backend Listener]: Backend Listener waiting for messages.
INFO[VTPM]: [VTPM Listeners]: VTPM Listeners waiting for messages.

// HERE I START NEW DOMU
INFO[VTPM]: [Backend Listener]: RECV[14}: 0x0 0 0 0 1 c1 0 0 0 13 0 0 0
1 0 0 0 0 0 0 0 0 4
INFO[VTPM]: Save_NVMing[9]: 0x
INFO[VTPM]: Enveloping Input[9]: 0x0 0 0 0 0 0 0 0 4
INFO[VTSP]: Binding 16 bytes of data.
INFO[VTPM]: Saved 256 bytes of E(symkey) + 32 bytes of E(data)
INFO[VTPM]: Enveloping Output[296]: 0x0 0 1 0 58 0 b1 c1 c5 d4 26 d0 80
86
d5 ba 93 24 c5 30 c 4c 43 c8 cb c3 d7 f7 c5 97 c3 40 d5 f1 d5 eb 37 74
18 4e 2 67 43 f0 6f 2b 2 54 ef ef ce 53 76 7c c4 d3 f8 c1 32 cf 94 41 41
dc fd 5e be 31 bb e2 1a 5 c0 8 3c 5d 64 a8 40 e8 af 9b 71 ed 1e 81 5a da
61
36 30 ed e0 f4 d9 dc 67 83 da 27 63 42 92 b9 49 51 eb 8b 8e e5 16 82 1
97 be 52 1b 66 b7 57 37 43 6e 89 e4 14 3e 61 a f0 93 ae 92 69 52 43 ab
3e 9a ad e6 12 8d 14 fd 75 ca a6 c9 a 91 de cf 7f 51 a9 90 56 87 a9 a4
ba 26 38
d9 9f ad 8f 26 d9 38 54 88 30 ee 58 6f f1 58 d9 12 14 58 9e c9 9b 32 24
37 fe 62 a 40 de 7f f3 86 61 d1 19 7e c 2a bf bf 76 6b cc cf 74 2e dd 3f
c1 9f 65 b5 46 6 bd b1 e5 25 df b8 83 58 ed e9 97 b3 10 c0 7f ee ca a9
1a 7f e b e4 e9 99 8e 22 b3 85 58 45 e9 2c 1c 89 b dc 8d 13 d3 9a 0 0 0
20 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 f9 cd f7 84 29 d3 42 b2 94 c4 aa ae
4a 33 28 fb
INFO[VTPM]: [Backend Listener]: SENT: 0x0 0 0 0 1 c1 0 0 0 a 0 0 0 0
INFO[VTPM]: [Backend Listener]: Backend Listener waiting for messages.
INFO[VTPM]: [Backend Listener]: RECV[14}: 0x0 0 0 4 0 c1 0 0 0 12 0 0 0
65 0 0 0 1a 0 0 0 0
ERROR[VTPM]: [Backend Listener]: Attempted access to non-existent or
disconnected DMI 4. Aborting...
Killed


As you can see when the DomU is coming up there's no output that says
that a new DMI instance is started. So when my DomU issues a TPM
command, the BE receives a request coming from DMI instance 4, but this
instance is not present so far.

Do you have any idea what is going wrong here?
Thanks for your help.

Anna



_______________________________________________
Xense-devel mailing list
Xense-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xense-devel