Man pages sections > man8 > tpm2_activatecredential

tpm2_activatecredential - Verify that the given content is protected with

tpm2_activatecredential(8) tpm2.0-tools tpm2_activatecredential(8)

NAME

tpm2_activatecredential - Verify that the given content is protected with given keyHandle for given handle, and then decrypt and return the secret, if any passwd option is missing, assume NULL. Currently only support using TCG profile compliant EK as the keyHandle.

SYNOPSIS

tpm2_activatecredential[ COMMON OPTIONS ] [ TCTI OPTIONS ] [ --handle|--context|--keyHandle|--keyContext|--Password|--endorsePasswd|--inFile|--outFile|--passwdInHex| ]
Verify that the given content is protected with given keyHandle for given handle, and then decrypt and return the secret, if any passwd option is missing, assume NULL. Currently only support using TCG profile compliant EK as the keyHandle.

DESCRIPTION

tpm2_activatecredential Verify that the given content is protected with given keyHandle for given handle, and then decrypt and return the secret, if any passwd option is missing, assume NULL. Currently only support using TCG profile compliant EK as the keyHandle.

OPTIONS

-H ,--handle
Handle of the object associated with the created certificate by CA
-c ,--context
filename for handle context
-k ,--keyHandle
Loaded key used to decrypt the the random seed
-C ,--keyContext
filename for keyHandle context
-P ,--Password
the handle's password, optional
-e ,--endorsePasswd
the endorsement password, optional
-f ,--inFile
Input file path, containing the two structures needed by tpm2_activatecredential function
-o ,--outFile
Output file path, record the secret to decrypt the certificate
-X ,--passwdInHex
passwords given by any options are hex format.
[COMMON OPTIONS ]
This collection of options are common to many programs and provide information that many users may expect.
-h, --help
Display a manual describing the tool and its usage.
-v, --version
Display version information for this tool.
-V, --verbose
Increase the information that the tool prints to the console during its execution.
[TCTI OPTIONS ]
This collection of options are used to configure the varous TCTI modules available.
-T, --tcti
Select the TCTI used for communication with the next component down the TSS stack. In most configurations this will be the TPM but it could be a simulator or proxy. Supported TCTIs are or “device” or “socket”
-d, --device-file
Specify the TPM device file for use by the device TCTI. The default is /dev/tpm0.
 
-R, --socket-address
Specify the domain name or IP address used by the socket TCTI. The default is 127.0.0.1.
-p, --socket-port
Specify the port number used by the socket TCTI. The default is 2321.
ENVIRONMENT: TCTI
This collection of environment variables that may be used to configure the varous TCTI modules available. The values passed through these variables can be overridden on a per-command basis using the available command line options.
TPM2TOOLS_TCTI_NAME
Select the TCTI used for communication with the next component down the TSS stack. In most configurations this will be the TPM but it could be a simulator or proxy. See ' OPTIONS' section for the names of supported TCTIs.
TPM2TOOLS_DEVICE_FILE
Specify the TPM device file for use by the device TCTI.
 
TPM2TOOLS_SOCKET_ADDRESS
Specify the domain name or IP address used by the socket TCTI.
TPM2TOOLS_SOCKET_PORT
Specify the port number used by the socket TCTI.

EXAMPLES

tpm2_activatecredential
tpm2_activatecredential -H 0x81010002 -k 0x81010001 -P abc123 -e abc123 -f <filePath> -o <filePath>
tpm2_activatecredential -c ak.context -C ek.context -P abc123 -e abc123 -f <filePath> -o <filePath>
tpm2_activatecredential -H 0x81010002 -k 0x81010001 -P 123abc -e 1a1b1c -X -f <filePath> -o <filePath>

DECEMBER 2016 Intel