Hello,
I have a few product lines that use a SLB9760 for zero touch enrollments where we provision IAK/IDevID certificates into the TPM during device manufacturing. We've observed that while most SLB9670 devices arrive with the EK (key) missing from NVRAM (where we usually create and persist the EK in NVRAM) some have the EK (key) already present at the default NVRAM location.
This isn't a "problem" in the sense that I can adjust our process to first check for a EK certificate at the NVRAM index and skip the EK generation and persistence step. However, I'd like to understand why not all new SLB9670's we use in production look the same by default? (e.g. most have EK (key) not persisted in NVRAM at handle 0x81010001 and we need to generate it and then persist it). Is this expected? if so why?
Thanks,
Jack
