tpm2_getekcertificate(1) General Commands Manual tpm2_getekcertificate(1) (NAME) tpm2_getekcertificate - TPM2 (EK) (SYNOPSIS) tpm2_getekcertificate [] [] (DESCRIPTION) tpm2_getekcertificate(1) - (EK). NV TCG TPM TPM . : 1. NV (NV-Index): . 2. EK (Intel-EK-certificate-server): EK NV tpmEPSgenerated CLEAR TPM INTC . 3. EK (Intel-EK-Re-certification-server): EK NV tpmEPSgenerated SET TPM INTC . : / . / EK tpm2_getekcertificate NV . 4. EK: EK . (OPTIONS) o -o --ek-certificate=FILE STDOUT: (EK). EK TPM NV RSA ECC . EK TPM NV . EK TPM NV (stdout) . o -X --allow-unverified: TPM . EK TPM NV . : CA . o -u --ek-public=FILE: tss . o -x --offline: . EK . . . EK NV . o -raw: EK (NV ) . o -E --encoding=ENCODING: . AMD fTPM AMD . AMD `a' Intel `i' . o -t --x509-trunc: TPM NV X509 . TPM . o (ARGUMENT): URL EK . EK NV . (References) (COMMON OPTIONS) . o -h --help=[man|no-man]: . . "man" "man" man stderr . "no-man" stdout . MANPATH man(1) . o -v --version: TCTI . o -V --verbose: . . o -Q --quiet: (stdout). o -Z --enable-errata: (errata). errata TPM . TPM2TOOLS_ENABLE_ERRATA . o -z --pwd-session: HMAC . TPM . (unsalted) FIPS . auth . o -R --autoflush: (autoflush) (transient) . . TPM2TOOLS_AUTOFLUSH yes true . TCTI (TCTI CONFIGURATION) TCTI " (Transmission Interface)" TPM . TCTI TPM . TCTI : 1. -T --tcti 2. : TPM2TOOLS_TCTI. : . TCTI : o tabrmd - tabrmd . tabrmd abrmd tcti . o mssim - TPM . o device - TPM . o none - TPM . TPM (off-tpm) TCTI . TCTI . "none" . : : . TCTI (TCTI DEFAULTS) TCTI TCTI dlopen(3) . TCTI tabrmd device mssim . -v TCTI . - "default-tcti" TCTI . TCTI (CUSTOM TCTIS) TCTI TCTI . dlopen(3) tcti-name . dlopen(3) . TCTI (TCTI OPTIONS) TCTI : o device: TCTI TPM TCTI . /dev/tpm0 . : -T device:/dev/tpm0 export TPM2TOOLS_TCTI="device:/dev/tpm0" o mssim: TCTI mssim IP . 127.0.0.1 2321 . : -T mssim:host=localhost,port=2321 export TPM2TOOLS_TCTI="mssim:host=localhost,port=2321" o abrmd: TCTI abrmd - `,' . `=' . o TCTI abrmd : 1. `bus_name' : tabrmd ( ). 2. `bus_type' : dbus ( ) `session' `system'. TCTI tabrmd bus_name=com.example.FooBar: \--tcti=tabrmd:bus_name=com.example.FooBar TCTI (abrmd) bus_type=session: \--tcti:bus_type=session : abrmd tabrmd . (NOTES) (verbose) curl curl verbose . (EXAMPLES) EK TPM EK tpm2_createek -G rsa -u ek.pub -c key.ctx tpm2_getekcertificate -X -o ECcert.bin -u ek.pub \ https://tpm.manufacturer.com/ekcertserver/ EK NV tpm2_createek -G rsa -u ek.pub -c key.ctx tpm2_getekcertificate -X -o ECcert.bin -u ek.pub EK tpm2_getekcertificate -X -x -o ECcert.bin -u ek.pub EK TPM NV ( ) tpm2_getekcertificate -o ECcert.bin EK TPM NV EK ( ) tpm2_createek -G ecc384 -u ek_ecc384.pub -c ek_ecc384.ctx tpm2_getekcertificate -o ek_ecc384.cert -u ek_ecc384.pub EK TPM NV ( ) tpm2_getekcertificate -o RSA_EK_cert.bin -o ECC_EK_cert.bin (RETURNS) : o 0 - . o 1 - . o 2 - . o 3 - . o 4 - TCTI. o 5 - . tpm2_testparams. (BUGS) (Github Issues) (HELP) (Mailing List) (LICENSE) 4.0 (CC BY 4.0) . tpm2-tools tpm2_getekcertificate(1)