tpm2(1) General Commands Manual tpm2(1) (NAME) tpm2 - tpm2-tools BusyBox (SYNOPSIS) tpm2 [] [] (DESCRIPTION) tpm2(1) - tpm2-tools initrd (embedded) TPM2 ( ) . (common options) (tool name) . tpm2_ (soft-link) tpm2 . BusyBox . : tpm2_getrandom 8 tpm2 getrandom 8 . (ARGUMENTS) . : . . certifyX509certutil checkquote eventlog print rc_decode activatecredential certify changeauth changeeps changepps clear clearcontrol clockrateadjust create createak createek createpolicy setprimarypolicy createprimary dictionarylockout duplicate getcap gettestresult encryptdecrypt evictcontrol flushcontext getekcertificate getrandom gettime hash hierarchycontrol hmac import incrementalselftest load loadexternal makecredential nvdefine nvextend nvincrement nvreadpublic nvread nvreadlock nvundefine nvwrite nvwritelock nvsetbits pcrallocate pcrevent pcrextend pcrread pcrreset policypcr policyauthorize policyauthorizenv policynv policycountertimer policyor policynamehash policytemplate policycphash policypassword policysigned policyticket policyauthvalue policysecret policyrestart policycommandcode policynvwritten policyduplicationselect policylocality quote readclock readpublic rsadecrypt rsaencrypt send selftest sessionconfig setclock shutdown sign certifycreation nvcertify startauthsession startup stirrandom testparms unseal verifysignature setcommandauditstatus getcommandauditdigest getsessionauditdigest geteccparameters ecephemeral commit ecdhkeygen ecdhzgen zgen2phase (References) (COMMON OPTIONS) . o -h --help=[man|no-man]: (manpage) . (manpager) . "man" "man" man stderr . "no-man" stdout . MANPATH man(1) . o -v --version: TCTI . o -V --verbose: . . o -Q --quiet: stdout. o -Z --enable-errata: (errata fixups). errata TPM . TPM2TOOLS_ENABLE_ERRATA . o -z --pwd-session: HMAC . (clear text) TPM . (unsalted) OpenSSL FIPS . auth (salted) . o -R --autoflush: (autoflush) . . TPM2TOOLS_AUTOFLUSH yes true . . TCTI (TCTI CONFIGURATION) TCTI "Transmission Interface" TPM . TCTI TPM . TCTI : 1. -T --tcti 2. : TPM2TOOLS_TCTI. : . TCTI : o tabrmd - tabrmd . tabrmd abrmd tcti . o mssim - TPM . o device - TPM . o none - TPM . TPM (off-tpm) TCTI . TCTI . "none" . : : . TCTI (TCTI Defaults) TCTI TCTI dlopen(3) . TCTI tabrmd device mssim . -v TCTI . - "default-tcti" TCTI . TCTI (Custom TCTIs) TCTI TCTI . dlopen(3) tcti-name . dlopen(3) . TCTI (TCTI OPTIONS) TCTI : o device: TCTI (device) (character device) TPM TCTI . /dev/tpm0 . : -T device:/dev/tpm0 export TPM2TOOLS_TCTI="device:/dev/tpm0" o mssim: TCTI mssim IP () . 127.0.0.1 2321 . : -T mssim:host=localhost,port=2321 export TPM2TOOLS_TCTI="mssim:host=localhost,port=2321" o abrmd: TCTI abrmd - `,' . `=' . o TCTI abrmd : 1. `bus_name' : tabrmd ( ). 2. `bus_type' : dbus ( ) `session' `system'. tcti tabrmd bus_name=com.example.FooBar: \--tcti=tabrmd:bus_name=com.example.FooBar tcti (abrmd) bus_type=session: \--tcti:bus_type=session : abrmd tabrmd . TCTI. (EXAMPLES) TPM tpm2 getrandom 8 | xxd -p (Startup) TPM TPM2_SU_CLEAR tpm2 startup -c (RETURNS) : o 0 - . o 1 - . o 2 - . o 3 - . o 4 - TCTI. o 5 - . tpm2_testparams. (BUGS) (Github Issues) (HELP) (Mailing List) (LICENSE) . (CC BY 4.0) . tpm2-tools tpm2(1)