Skip to content

TPM_RC_LOCKOUT received during kselftest-tpm2 #101

Description

@nfraprado

Issue found in kernelci/kernelci-core#1025.

The following tests from kselftest-tpm2

test_seal_with_auth (tpm2_tests.SmokeTest)
test_seal_with_policy (tpm2_tests.SmokeTest)
test_unseal_with_wrong_auth (tpm2_tests.SmokeTest)
test_unseal_with_wrong_policy (tpm2_tests.SmokeTest)

fail with

# ======================================================================
# ERROR: test_seal_with_auth (tpm2_tests.SmokeTest)
# ----------------------------------------------------------------------
# Traceback (most recent call last):
#   File \"/lava-5608585/0/tests/1_kselftest-livepatch/automated/linux/kselftest/output/tpm2/tpm2_tests.py\", line 26, in test_seal_with_auth
#     blob = self.client.seal(self.root_key, data, auth, None)
#   File \"/lava-5608585/0/tests/1_kselftest-livepatch/automated/linux/kselftest/output/tpm2/tpm2.py\", line 620, in seal
#     rsp = self.send_cmd(cmd)
#   File \"/lava-5608585/0/tests/1_kselftest-livepatch/automated/linux/kselftest/output/tpm2/tpm2.py\", line 397, in send_cmd
#     raise ProtocolError(cc, rc)
# tpm2.ProtocolError: TPM_RC_LOCKOUT: cc=0x00000153, rc=0x00000921

This issue has been observed on grunt and sona so far.

The issue can be worked around by running tpm2_clear from the tpm2-tools package before running the tests, however that solution is not acceptable upstream. So the root cause of the issue might need to be investigated so that a proper solution can be sent upstream.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions