src/tspi/tspi_admin.c

31 	TSS_RESULT result;
39 	if ((result = obj_tpm_get_tsp_context(hTPM, &tspContext)))
40 		return result;
42 	if ((result = obj_tpm_get_policy(hTPM, TSS_POLICY_USAGE, &hPolicy)))
43 		return result;
47 		result = Trspi_HashInit(&hashCtx, TSS_HASH_SHA1);
48 		result |= Trspi_Hash_UINT32(&hashCtx, TPM_ORD_DisableOwnerClear);
49 		if ((result |= Trspi_HashFinal(&hashCtx, hashDigest.digest)))
50 			return result;
52 		if ((result = secret_PerformAuth_OIAP(hTPM, TPM_ORD_DisableOwnerClear, hPolicy,
54 			return result;
56 		if ((result = TCS_API(tspContext)->DisableOwnerClear(tspContext, &auth)))
57 			return result;
59 		result = Trspi_HashInit(&hashCtx, TSS_HASH_SHA1);
60 		result |= Trspi_Hash_UINT32(&hashCtx, result);
61 		result |= Trspi_Hash_UINT32(&hashCtx, TPM_ORD_DisableOwnerClear);
62 		if ((result |= Trspi_HashFinal(&hashCtx, hashDigest.digest)))
63 			return result;
65 		if ((result = obj_policy_validate_auth_oiap(hPolicy, &hashDigest, &auth)))
66 			return result;
69 		result = TCS_API(tspContext)->DisableForceClear(tspContext);
73 		result = Trspi_HashInit(&hashCtx, TSS_HASH_SHA1);
74 		result |= Trspi_Hash_UINT32(&hashCtx, TPM_ORD_OwnerSetDisable);
75 		result |= Trspi_Hash_BOOL(&hashCtx, fTpmState);
76 		if ((result |= Trspi_HashFinal(&hashCtx, hashDigest.digest)))
77 			return result;
79 		if ((result = secret_PerformAuth_OIAP(hTPM, TPM_ORD_OwnerSetDisable, hPolicy,
81 			return result;
83 		if ((result = TCS_API(tspContext)->OwnerSetDisable(tspContext, fTpmState, &auth)))
84 			return result;
86 		result = Trspi_HashInit(&hashCtx, TSS_HASH_SHA1);
87 		result |= Trspi_Hash_UINT32(&hashCtx, result);
88 		result |= Trspi_Hash_UINT32(&hashCtx, TPM_ORD_OwnerSetDisable);
89 		if ((result |= Trspi_HashFinal(&hashCtx, hashDigest.digest)))
90 			return result;
92 		if ((result = obj_policy_validate_auth_oiap(hPolicy, &hashDigest, &auth)))
93 			return result;
97 			result = TCS_API(tspContext)->PhysicalDisable(tspContext);
99 			result = TCS_API(tspContext)->PhysicalEnable(tspContext);
103 		result = TCS_API(tspContext)->PhysicalSetDeactivated(tspContext, fTpmState);
106 		if ((result = obj_context_get_tpm_version(tspContext, &tpmVersion)))
107 			return result;
113 			result = TCS_API(tspContext)->SetTempDeactivated(tspContext);
116 			if ((result = obj_tpm_get_policy(hTPM, TSS_POLICY_OPERATOR, &hOperatorPolicy)))
117 				return result;
120 				result = Trspi_HashInit(&hashCtx, TSS_HASH_SHA1);
121 				result |= Trspi_Hash_UINT32(&hashCtx, TPM_ORD_SetTempDeactivated);
122 				if ((result |= Trspi_HashFinal(&hashCtx, hashDigest.digest)))
123 					return result;
126 				if ((result = secret_PerformAuth_OIAP(hTPM,
130 					return result;
135 			if ((result = TCS_API(tspContext)->SetTempDeactivated2(tspContext, pAuth)))
136 				return result;
139 				result = Trspi_HashInit(&hashCtx, TSS_HASH_SHA1);
140 				result |= Trspi_Hash_UINT32(&hashCtx, result);
141 				result |= Trspi_Hash_UINT32(&hashCtx, TPM_ORD_SetTempDeactivated);
142 				if ((result |= Trspi_HashFinal(&hashCtx, hashDigest.digest)))
143 					return result;
145 				if ((result = obj_policy_validate_auth_oiap(hOperatorPolicy,
148 					return result;
156 		result = TCS_API(tspContext)->SetOwnerInstall(tspContext, fTpmState);
159 		result = Trspi_HashInit(&hashCtx, TSS_HASH_SHA1);
160 		result |= Trspi_Hash_UINT32(&hashCtx, TPM_ORD_DisablePubekRead);
161 		if ((result |= Trspi_HashFinal(&hashCtx, hashDigest.digest)))
162 			return result;
164 		if ((result = secret_PerformAuth_OIAP(hTPM, TPM_ORD_DisablePubekRead, hPolicy,
166 			return result;
168 		if ((result = TCS_API(tspContext)->DisablePubekRead(tspContext, &auth)))
169 			return result;
171 		result = Trspi_HashInit(&hashCtx, TSS_HASH_SHA1);
172 		result |= Trspi_Hash_UINT32(&hashCtx, result);
173 		result |= Trspi_Hash_UINT32(&hashCtx, TPM_ORD_DisablePubekRead);
174 		if ((result |= Trspi_HashFinal(&hashCtx, hashDigest.digest)))
175 			return result;
177 		if ((result = obj_policy_validate_auth_oiap(hPolicy, &hashDigest, &auth)))
178 			return result;
196 		result = TSP_SetCapability(tspContext, hTPM, hPolicy, TPM_SET_PERM_FLAGS,
201 		result = Trspi_HashInit(&hashCtx, TSS_HASH_SHA1);
202 		result |= Trspi_Hash_UINT32(&hashCtx, TPM_ORD_ResetLockValue);
203 		if ((result |= Trspi_HashFinal(&hashCtx, hashDigest.digest)))
204 			return result;
206 		if ((result = secret_PerformAuth_OIAP(hTPM, TPM_ORD_ResetLockValue, hPolicy,
208 			return result;
210 		if ((result = TCS_API(tspContext)->ResetLockValue(tspContext, &auth)))
211 			return result;
213 		result = Trspi_HashInit(&hashCtx, TSS_HASH_SHA1);
214 		result |= Trspi_Hash_UINT32(&hashCtx, result);
215 		result |= Trspi_Hash_UINT32(&hashCtx, TPM_ORD_ResetLockValue);
216 		if ((result |= Trspi_HashFinal(&hashCtx, hashDigest.digest)))
217 			return result;
219 		if ((result = obj_policy_validate_auth_oiap(hPolicy, &hashDigest, &auth)))
220 			return result;
226 		result = TCS_API(tspContext)->PhysicalPresence(tspContext,
233 			result = TCS_API(tspContext)->PhysicalPresence(tspContext,
236 			result = TCS_API(tspContext)->PhysicalPresence(tspContext,
243 			result = TCS_API(tspContext)->PhysicalPresence(tspContext,
246 			result = TCS_API(tspContext)->PhysicalPresence(tspContext,
251 		result = TCS_API(tspContext)->PhysicalPresence(tspContext,
256 		result = TCS_API(tspContext)->PhysicalPresence(tspContext, (fTpmState ?
266 	return result;
275 	TSS_RESULT result;
282 	if ((result = obj_tpm_get_tsp_context(hTPM, &tspContext)))
283 		return result;
285 	if ((result = get_tpm_flags(tspContext, hTPM, &volFlags, &nonVolFlags)))
286 		return result;
356 		result = TSPERR(TSS_E_NOTIMPL);