HP-UX Trusted Computing Services A.02.00 Administrator's Guide

9 TCS Troubleshooting and Known Issues
This chapter describes potential TCS problems. It addresses the following topics:
• “Troubleshooting tcsd” (page 79)
• “Troubleshooting TCS Operation with EVFS” (page 84)
• “The tpmadm restore Command Fails” (page 85)
• “TCS Commands Fail When Run as a Nonprivileged User” (page 85)
• “Reporting Problems” (page 85)
Troubleshooting tcsd
The main entry point for applications accessing the TPM is through tcsd, which is closely tied
to the TPM driver. Use Figure 9-1 to troubleshoot tcsd.
Figure 9-1 TPM driver and tcsd Troubleshooting Flowchart
Is tcsd
running?
Did tcsd
start?
Check TPM
device driver
status
Is
/etc/opt/tcs
valid?
Restore
/etc/opt/tcs
swconfig or
re-install TCS?
no
no
no
failed
loaded
passed
reboot
Problem
solved?
yes
no no
yes
yes
yes
/sbin/init.d/tcs
start
tpmadm
selftest
tpmlist
status
swconfig TCS
or enable TPM
Call HP
support
1
10
2
3
Is TPM
installed and
enabled?
6 7
8
4
5
9
TIP: The numbered items in the following procedure correspond to the numbers in Figure 9-1.
To troubleshoot the TPM driver and tcsd, follow these steps:
1. To see if tcsd is running, enter the following command:
ps –ef | grep tcsd | grep –v “grep tcsd”
2. If tcsd cannot start, check for error messages in the /var/adm/syslog/syslog.log file.
Alternatively, use the tcsd –f option to start tcsd in the foreground so you can see the
error messages on the console.
3. Enter the following command to check the status of the TPM kernel module:
kcmodule tpm
The status column must display loaded for proper TCS operation.
Verify that the device file /dev/tpm exists, that its ownership is tss:tss and its permission
is 0660.
Troubleshooting tcsd 79