Copyright (C) 2006 International Business Machines Corporation
Written by Anthony Bussani based on the Trusted Computing Group Software Stack Specification Version 1.2

\\$1

.. ..

..

1 TCG Software Stack Developer's Reference

Tspi_DAA_IssueInit - initialize the Issuer for a join operation

 #include <tss/tss_typedef.h>  #include <tss/tss_structs.h>  #include <tss/tspi.h>  "TSPICALL Tspi_DAA_IssueInit("  " TSS_HDAA " hDAA ","  " TSS_HKEY " issuerAuthPK ","  " TSS_HKEY " issuerKeyPair ","  " TSS_DAA_IDENTITY_PROOF " identityProof ","  " UINT32 " capitalUprimeLength ","  " BYTE* " capitalUprime ","  " UINT32 " daaCounter ","  " UINT32* " nonceIssuerLength ","  " BYTE** " nonceIssuer ","  " UINT32* " authenticationChallengeLength ","  " BYTE** " authenticationChallenge ","  " TSS_DAA_JOIN_ISSUER_SESSION* " joinSession  ");" 

\Tspi_DAA_IssueInit is a function that is part of the DAA Issuer component. It's the first function out of 2 in order to issue a DAA Credential for a TCG Platform. It assumes that the endorsement key and its associated credentials are from a genuine and valid TPM. (Verification of the credentials is a process defined by the TCG Infrastructure WG.)

The hDAA parameter is used to specify the handle of the DAA object. The issuerAuthPKh parameter is the root authentication (public) key of DAA Issuer. The issuerKeyPair parameter is the handle of the main DAA Issuer key pair (private and public portion). The identityProof parameter is the structure containing endorsement, platform and conformance credential of the TPM requesting the DAA Credential. The capitalUprimeLength parameter is the length of capitalUprime which is . The capitalUprime parameter is U'. The daaCounter parameter is the DAA counter. The nonceIssuerLength parameter is the length of nonceIssuer (20 bytes). The nonceIssuer parameter is the nonce of the DAA Issuer. The authenticationChallengeLength parameter is the length of authenticationChallenge (256 bytes - DAA_SIZE_NE1). The authenticationChallenge parameter is the second nonce of the DAA Issuer that is encrypted by the endorsement public key. It is used as a challenge to authenticate the TPM. The joinSession parameter is the structure containing the DAA Join session information.

Tspi_DAA_IssueInit returns TSS_SUCCESS on success, otherwise one of the following values is returned:

TSS_E_INVALID_HANDLE Either the DAA is not valid.

TSS_E_BAD_PARAMETER

TSS_E_INTERNAL_ERROR An internal SW error has been detected.

Tspi_DAA_IssueInit conforms to the Trusted Computing Group Software Specification version 1.2

Tspi_DAA_IssuerKeyVerification(3)