Man pages sections > man8 > tpm2_getpubek

tpm2_getpubek - Generate TCG profile compliant endorsement

tpm2_getpubek(8) tpm2.0-tools tpm2_getpubek(8)

NAME

tpm2_getpubek - Generate TCG profile compliant endorsement key(endorsement hierarchy primary object), make it persistent with give ek handle, and return public EK, if any passwd option is missing, assume NULL, default type/alg is 0x1(RSA) Refer to: http://www.trustedcomputinggroup.org/files/static_page_files/7CAA5687-1A4B-B294-D04080D058E86C5F/Credential_Profile_EK_V2.0_R14_published.pdf

SYNOPSIS

tpm2_getpubek[ COMMON OPTIONS ] [ TCTI OPTIONS ] [ --endorsePasswd|--ownerPasswd| --ekPasswd|--handle| --alg|--file|--passwdInHex| ]
Generate TCG profile compliant endorsement key(endorsement hierarchy primary object), make it persistent with give ek handle, and return public EK, if any passwd option is missing, assume NULL, default type/alg is 0x1(RSA) Refer to: http://www.trustedcomputinggroup.org/files/static_page_files/7CAA5687-1A4B-B294-D04080D058E86C5F/Credential_Profile_EK_V2.0_R14_published.pdf

DESCRIPTION

tpm2_getpubek Generate TCG profile compliant endorsement key(endorsement hierarchy primary object), make it persistent with give ek handle, and return public EK, if any passwd option is missing, assume NULL, default type/alg is 0x1(RSA) Refer to: http://www.trustedcomputinggroup.org/files/static_page_files/7CAA5687-1A4B-B294-D04080D058E86C5F/Credential_Profile_EK_V2.0_R14_published.pdf

OPTIONS

-e ,--endorsePasswd
specifies current endorse password (string, optional, default:NULL).
-o ,--ownerPasswd
specifies current owner password (string, optional, default:NULL).
-P ,--ekPasswd
specifies the EK password when created (string, optional, default:NULL).
-H ,--handle
specifies the handle used to make EK persistent (hex).
-g ,--alg
specifies the algorithm type of EK (default:0x01/TPM_ALG_RSA). TPM_ALG_RSA 0x0001 TPM_ALG_KEYEDHASH 0x0008 TPM_ALG_ECC 0x0023 TPM_ALG_SYMCIPHER 0x0025
-f ,--file
specifies the file used to save the public portion of EK.
-X ,--passwdInHex
passwords given by any options are hex format
[COMMON OPTIONS ]
This collection of options are common to many programs and provide information that many users may expect.
-h, --help
Display a manual describing the tool and its usage.
-v, --version
Display version information for this tool.
-V, --verbose
Increase the information that the tool prints to the console during its execution.
[TCTI OPTIONS ]
This collection of options are used to configure the varous TCTI modules available.
-T, --tcti
Select the TCTI used for communication with the next component down the TSS stack. In most configurations this will be the TPM but it could be a simulator or proxy. Supported TCTIs are or “device” or “socket”
-d, --device-file
Specify the TPM device file for use by the device TCTI. The default is /dev/tpm0.
 
-R, --socket-address
Specify the domain name or IP address used by the socket TCTI. The default is 127.0.0.1.
-p, --socket-port
Specify the port number used by the socket TCTI. The default is 2321.
ENVIRONMENT: TCTI
This collection of environment variables that may be used to configure the varous TCTI modules available. The values passed through these variables can be overridden on a per-command basis using the available command line options.
TPM2TOOLS_TCTI_NAME
Select the TCTI used for communication with the next component down the TSS stack. In most configurations this will be the TPM but it could be a simulator or proxy. See ' OPTIONS' section for the names of supported TCTIs.
TPM2TOOLS_DEVICE_FILE
Specify the TPM device file for use by the device TCTI.
 
TPM2TOOLS_SOCKET_ADDRESS
Specify the domain name or IP address used by the socket TCTI.
TPM2TOOLS_SOCKET_PORT
Specify the port number used by the socket TCTI.

EXAMPLES

tpm2_getpubek
tpm2_getpubek -e abc123 -o abc123 -P passwd -H 0x81010001 -g 0x01 -f ek.pub
tpm2_getpubek -e 1a1b1c -o 1a1b1c -P 123abc -X -H 0x81010001 -g 0x01 -f ek.pub

DECEMBER 2016 Intel