Attestation fails to generate key pair after factory reset and restore from backup

[NarwhalPrince]

After doing a factory reset through recovery, I restored the device using a seedvault backup. After doing this, I am unable to complete local or remote attestation. The pairings have been cleared and the device has been rebooted. Fails with:

java.security.ProviderException: Failed to generate key pair.

Included Auditor's verbose log
Auditor log cec7810070dd.txt

First time submitting an issue, please go easy on me.

[thestinger]

Did you connect to the internet already? Try clearing Auditor data and trying again. This looks like a firmware issue rather than something GrapheneOS specific.

[NarwhalPrince]

I did connect to the internet and tried clearing Auditor app data. Is internet required for local attestation?

[thestinger]

Not directly, but an internet connection is needed for remote key provisioning to update the the hardware attestation keys. It can work without that but perhaps not after a factory reset where it previously remotely provisioned keys.

[NarwhalPrince]

Understood, I will try it again after disabling my firewall. It's possible that it wasn't able to update the keys. Do you know the IP address(es) that would be contacted for this process?

[thestinger]

One of these 4 depending on GeoIP:

https://grapheneos.org/articles/grapheneos-servers#grapheneos.network

[NarwhalPrince]

No luck still with remote or local attestation on a clear network.

[NarwhalPrince]

Also tried Google's key provisioning server, no luck.

[zacha81]

I have the same problem. Factory reset device, installed Seedvault Backup. Attestation fails. Internet connection is fine. I removed the device from attestation server and did a reset on the attestation app. Tried to enable it again, still the same.

java.security.ProviderException: Failed to generate key pair
attesttation.log