The Linux Manuals (man pages) document is an important part of Linux documents. Linux Manuals are organized as several sections. Each section has a group of commands for a specific area in Linux usage, administration or development.
tpm_updatepcrhash Synopsis tpm_updatepcrhash [-hv] OLD-HASH-FILE PCR-VALUE-FILE NEW_HASH-FILE Description This program updates the PCR composite hash in file OLD-HASH-FILE to produce the file NEW-HASH-FILE. The new composite hash is computed from the data in the file PCR-VALUE-FILE, which contains a list of PCR index=value pairs. The format of this file as the same as PCR value…
tpm_unloadkey Synopsis tpm_loadkey [-r HOST] [-hv] UUID-FILE Description The program unregisters the key associated with the UUID in UUID-FILE. -r HOST Perform operation on remote HOST. -h Display command usage info. -v Display command version info. See Also tpm_quote_tools(8), tpm_loadkey(8)
TPM Management – tpm_takeownership Name tpm_takeownership – setup an owner on the TPM Synopsis tpm_takeownership [OPTION] Description tpm_takeownership setup an owner on the system’s TPM (via the TPM_TakeOwnership API). This operation requires the TPM to be enabled and can be restricted by tpm_setownable. The command will prompt for owner and SRK passwords and confirmations of…
TPM Management – tpm_setpresence Name tpm_setpresence- change TPM physical presence states or settings Synopsis tpm_setpresence [OPTION] Description tpm_setpresence reports the status of the TPM’s flags regarding physical presence. This is the default behavior and also accessible via the –status option. Requesting a report of this status prompts for the owner password. The –assert option changes…
TPM Management – tpm_setownable Name tpm_setownable – change whether the TPM allows tpm_takeownership operations Synopsis tpm_setownable [OPTION] Description tpm_setownable reports the status of the TPM’s flags regarding if the TPM can be owned. This is the default behavior and also accessible via the –status option. Requesting a report of this status prompts for the owner…
TPM Management – tpm_setoperatorauth Name tpm_setoperatorauth – sets the operator authorization value in the TPM Synopsis tpm_setoperatorauth [OPTION] Description tpm_setoperatorauth allows setting the operator authorization value in the TPM (via the TPM_SetOperatorAuth API). This operation prompts for the new password and a confirmation of it. The –well-known option tells the API to use the default…
TPM Management – tpm_setenable Name tpm_setenable – change TPM enable states Synopsis tpm_setenable [OPTION] Description tpm_setenable reports the status of the TPM’s flags regarding the enable state of the TPM. This is the default behavior and also accessible via the –status option. Requesting a report of this status prompts for the owner password. The –enable…
TPM Management – tpm_setclearable Name tpm_setclearable – disable TPM clear operations Synopsis tpm_setclearable [OPTION] Description tpm_setclearable reports the status of the TPM’s flags regarding how the TPM can be cleared. This is the default behavior and also accessible via the –status option. Requesting a report of this status prompts for the owner password. The –owner…
TPM Management – tpm_setactive Name tpm_setactive – change TPM active states Synopsis tpm_setactive [OPTION] Description tpm_setactive reports the status of the TPM’s flags regarding the active state of the TPM. This is the default behavior and also accessible via the –status option. Requesting a report of this status prompts for the owner password. The –active…
TPM Management – tpm_selftest Name tpm_selftest – request TPM perform selftest and report Synopsis tpm_selftest [OPTION] Description tpm_selftest requests that the system’s TPM perform a self test (via the TPM_SelfTestFull API) and report the results. The –results option reports the outcome of the last self test operation without requesting that another test be executed. If…
TPM Management – tpm_revokeek Name tpm_revokeek – revokes the Endorsement Key Pair of the TPM Synopsis tpm_revokeek [OPTION] Description tpm_revokeek clears the TPM revocable Endorsement Key Pair (via the TPM_RevokeEndorsementKey API). This command erases all counters (except the base one), erases the Ek, the SRK, the owner auth and any NVRAM locked to the owner…
TPM Management – tpm_restrictpubek Name tpm_restrictpubek – restrict the ability to display the public portion of the Endorsement Key to the owner Synopsis tpm_restrictpubek [OPTION] Description tpm_restrictpubek reports the status of who can display the public portion of the Endorsement Key. This is the default behavior and also available with the –status option. This operation…
TPM Management – tpm_resetdalock Name tpm_resetdalock – reset the dictionary attack lock for the user (require owner authentication) Synopsis tpm_resetdalock Description tpm_resetdalock resets the dictionary attack lock. It prompts for owner authentication and, if password is correct, calls ‘tpmSetStatus’ which does necessary action to reset dictionary attack lock. -h, –help Display command usage info. -v,…
TPM Quote Tools Programs tpm_mkuuid, tpm_mkaik, tpm_loadkey, tpm_unloadkey, tpm_getpcrhash, tpm_updatepcrhash, tpm_getquote, tpm_verifyquote Description TPM Quote Tools is a collection of programs that provide support for TPM based attestation using the TPM quote operation. A TPM contains a set of Platform Configuration Registers (PCRs). In a well configured machine, some of these registers are set to…
tpm_nvwrite Synopsis tpm_nvwrite [OPTIONS] Description tpm_nvwrite writes data to an NVRAM area. The user must provide the index of the NVRAM area as well as the data to write into the NVRAM area. Optionally an offset into the NVRAM area can be given where the writing of the data is to start. Similarly the use…
tpm_nvrelease Synopsis tpm_nvrelease [OPTIONS] Description tpm_nvrelease releases an NVRAM area. The user must provide the index of the NVRAM area. If owner authentication is required then the user must provide the owner password. Note that some areas cannot be released since they are permanent. Others can be release only after a reboot of the system….
tpm_nvread Synopsis tpm_nvread [OPTIONS] Description tpm_nvread reads data from an NVRAM area and either displays them or writes them into a file. The user must provide the index of the NVRAM area. If the user provided the number of bytes to read then this will be the maximum number of bytes that will be read…
tpm_nvinfo Synopsis tpm_nvinfo [OPTIONS] Description tpm_nvinfo displays information about defined NVRAM areas. The user may restrict it to display only a single NVRAM area by providing an index or may choose ton only list available NVRAM areas indices without displaying the NVRAM areas’ detailed information. The following options are supported: -h, –help Display command usage…
tpm_nvdefine Synopsis tpm_nvdefine [OPTIONS] Description tpm_nvdefine defines a new NVRAM area at the given index and of given size. The user has to provide the permissions that control access to the NVRAM area. Owner authentication is necessary once the NVRAM area 0xFFFFFFFF has been defined. The owner password may be provided on the command line…
tpm_mkuuid Synopsis tpm_uuid [-hv] UUID-FILE Description The program generates a TPM UUID and stores it in the file UUID-FILE. -h Display command usage info. -v Display command version info. See Also tpm_quote_tools(8)