I'm trying to use TPM 2.0 chip in my laptop to manage new pair of RSA keys and create a CSR on top of new private key but when I list certificates managed by my TPM, I got only keys labeled as public and don't know, how to get URL to my private key which I want to use for CSR generation.
I used following procedure:
#generate rsa key: p11tool --login --so-login --generate-rsa --bits=2048 --label=dave4 "$token"``` #list my certificates: p11tool --list-all ""
But all certificates URL I got when I try to list them are labeled as public:
and list priv keys does not return any object:
p11tool --list-privkeys pkcs11:model=NPCT75x;manufacturer=Nuvoton;serial=0000000000000000;token=dave4 No matching objects found
Do you have any idea how to get list of private keys URL or another way how to generate new rsa keypair in order to create CSR afterwards?