Don't know why this came through from owners list,
Adding back the mailing list. My response inline below.
From: Roberts, William C
Sent: Monday, July 20, 2020 2:11 PM
To: Phani Srinivas <phani.srinivas(a)in.abb.com>; tpm2-owner(a)lists.01.org
Subject: RE: Help required in using the FAPI
> -----Original Message-----
> From: Phani Srinivas <phani.srinivas(a)in.abb.com>
> Sent: Monday, July 20, 2020 12:49 PM
> To: tpm2-owner(a)lists.01.org
> Subject: Help required in using the FAPI
> Hello All,
> Need support in using the FAPI layer of TSS, have some questions
> related to it after started using the git hub project
> * Does FAPI_createKey support symmetric key creation
No, as most TPMs don't support symmetric key operations via encrypdecrypt
> * Is there any Template for the crypto profile used in FAPI
> * How to specify the Unique value in the profile while creating the SRK
I don't think there is.... the SRK follows the EK but with a few changes.
So the unique values come from reading the NV index and it looks like
ifapi_init_primary_async() handles that case.
> * Can multiple profiles be used in FAPI and provisioned individually
Not sure, but you can set the fapi config in use via TSS2_FAPICONF. So you can
have N setups, but one is system Wide default.
> Phani Srinivas S
> R&D Principal Engineer, ABB