Help with AIK activation C#

[Radranic]

I've been working with the sample here at Tpm2Tester/TestSuite/Sample-AikActivation.cs as the basis of what I'm doing.

The server side that is doing the equivalent of the "CreateActivationCredentials" also expects an attestation and signature to go with the EK, AK and creation information.

From my understanding that means using "CertifyCreation", but I'm rather new to doing things with a TPM and am not sure how to make it work. From my understanding you can't use the EK to sign things, so I'm not sure how I'm supposed to be calling CertifyCreation.

Any help/pointers in the right direction would be extremely helpful, and maybe the sample could be updated to include that step (if it's something that is often required on the service/CA side.

Thanks

[Radranic]

Figure it out myself. Was missing the session.