tpm2_evictcontrol(1) General Commands Manual tpm2_evictcontrol(1) (NAME) tpm2_evictcontrol(1) - () . (SYNOPSIS) tpm2_evictcontrol [OPTIONS] [ARGUMENT] (DESCRIPTION) tpm2_evictcontrol(1) - () () TPM . HANDLE . -c HANDLE HANDLE . HANDLE - . -c () . (OPTIONS) o -C, --hierarchy=OBJECT: . "owner" . : o o TPM_RH_OWNER o p TPM_RH_PLATFORM o . o -c, --object-context=OBJECT: (context object) . OBJECT . OBJECT (non-volatile) () . o -P, --auth=AUTH: -C. o -o, --output=FILE: . . . o --cphash=FILE . cpHash . : cpHash . o ARGUMENT . (OUTPUT) YAML : persistent-handle: action: evicted|persisted persistent-handle . action evicted persisted . evicted persistent-handle TPM . persisted persistent-handle TPM . (REFERENCES) (CONTEXT OBJECT FORMAT) : o TPM . o : o owner: (owner) o platform: (platform) o endorsement: (endorsement) o lockout: (lockout) o ( 0x81010013) . (AUTHORIZATION FORMATTING) TPM 2.0 : . (Password) . HMAC . (Sessions) : " ". auth HMAC . . . HMAC ( tpm2_startauthsession(1) ). (PASSWORDS) . : . (STRING) "str:" ( ) . (EXAMPLES) foobar str:foobar (HEX-STRING) "hex:" () . (EXAMPLE) hex:1122334455667788 (FILE) "file:" "-" (stdin). . (EXAMPLES) # stdin file:- # file:path/to/password/file # stdin echo: echo foobar | tpm2_tool -p file:- # bash here-string stdin: tpm2_tool -p file:- <<< foobar (SESSIONS) (policy session) session . tpm2_startauthsession(1) . auth ( ) + (PASSWORDS) . (EXAMPLES) session.ctx: session:session.ctx session.ctx auth mypassword: session:session.ctx+mypassword session.ctx auth 0x11223344: session:session.ctx+hex:11223344 PCR (PCR AUTHORIZATIONS) "pcr:" PCR PCR . PCR : = PCR " PCR" . raw-pcr-file PCR tpm2_pcrread(1) . PCR (EXAMPLES) PCR sha256 : pcr:sha256:0,1,2,3 AUTH. (COMMON OPTIONS) . o -h, --help=[man|no-man]: . man . "man" "man" man stderr . "no-man" man stdout . MANPATH man(1) . o -v, --version: TCTI . o -V, --verbose: . . o -Q, --quiet: stdout. o -Z, --enable-errata: (errata fixups). TPM . TPM2TOOLS_ENABLE_ERRATA . o -z, --pwd-session: HMAC . TPM . (unsalted) OpenSSL FIPS . auth . o -R, --autoflush: (autoflush) . . TPM2TOOLS_AUTOFLUSH yes true . TCTI (TCTI CONFIGURATION) TCTI "Transmission Interface" TPM . TCTI TPM . TCTI : 1. -T --tcti 2. : TPM2TOOLS_TCTI. : . TCTI : o tabrmd - tabrmd . tabrmd abrmd tcti . o mssim - TPM . o device - TPM . o none - TPM . TPM (off-tpm) TCTI . TCTI . "none" . : : . TCTI (TCTI DEFAULTS) TCTI TCTI dlopen(3) . TCTI tabrmd device mssim . -v TCTI . - "default-tcti" TCTI . TCTI (CUSTOM TCTIS) TCTI TCTI . dlopen(3) tcti-name . dlopen(3) . TCTI (TCTI OPTIONS) TCTI : o device: TCTI (device) TPM TCTI . /dev/tpm0 . : -T device:/dev/tpm0 export TPM2TOOLS_TCTI="device:/dev/tpm0" o mssim: TCTI (mssim) IP . 127.0.0.1 2321 . : -T mssim:host=localhost,port=2321 export TPM2TOOLS_TCTI="mssim:host=localhost,port=2321" o abrmd: TCTI abrmd `,' . `=' . o TCTI : 1. `bus_name' : tabrmd ( ). 2. `bus_type' : dbus ( ) `session' `system' . tcti tabrmd bus_name=com.example.FooBar: \--tcti=tabrmd:bus_name=com.example.FooBar tcti (abrmd) bus_type=session: \--tcti:bus_type=session : abrmd tabrmd . (EXAMPLES) 0x81010002 (To make a transient handle persistent at address 0x81010002) tpm2_changeauth -c o ownerauth tpm2_createprimary -c primary.ctx -P ownerauth tpm2_evictcontrol -C o -c primary.ctx 0x81010002 -P ownerauth (To evict a persistent handle) tpm2_evictcontrol -C o -c 0x81010002 -P ownerauth (To make a transient handle persistent and output a serialized persistent handle) tpm2_evictcontrol -C o -c primary.ctx -o primary.handle -P ownerauth (RETURNS) : o 0 - . o 1 - . o 2 - . o 3 - . o 4 - TCTI. o 5 - (Non supported scheme). tpm2_testparams. (BUGS) (Github Issues) (HELP) . (LICENSE) . (CC BY 4.0) . . tpm2-tools tpm2_evictcontrol(1)