From 2635f805d17abd9857cca66b64e181f3f50cba55 Mon Sep 17 00:00:00 2001
From: waner <hongz.wan@sunyard.com>
Date: Fri, 24 Apr 2026 10:04:39 +0800
Subject: [PATCH] =?UTF-8?q?fix=EF=BC=9A=E5=AF=86=E9=92=A5=E9=94=80?=
 =?UTF-8?q?=E6=AF=81=E9=A1=BA=E5=BA=8F?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../com/cisd/tms/modules/mk/service/impl/LmkServiceImpl.java  | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/main/java/com/cisd/tms/modules/mk/service/impl/LmkServiceImpl.java b/src/main/java/com/cisd/tms/modules/mk/service/impl/LmkServiceImpl.java
index c565e9d..650565a 100644
--- a/src/main/java/com/cisd/tms/modules/mk/service/impl/LmkServiceImpl.java
+++ b/src/main/java/com/cisd/tms/modules/mk/service/impl/LmkServiceImpl.java
@@ -85,10 +85,12 @@ public class LmkServiceImpl implements LmkService {
     public void destroyMasterKey() {
         // 销毁后也不能再继续复用上一轮备份材料。
         clearCachedBackupRound();
+        //先删除用户密钥，都则主密钥删除后，设备处于初始状态，无法调用
+        pcieCryptoService.deleteUserKey(USER_KEY_INDEX);
+
         pcieCryptoService.destroyLmk();
         pcieCryptoService.destroyIk(IKEnums.KEY_TYPE_AUTH.getCode());
         pcieCryptoService.destroyIk(IKEnums.KEY_TYPE_DEVICE.getCode());
-        pcieCryptoService.deleteUserKey(USER_KEY_INDEX);
     }
 
     @Override