tpm2_policynv(1) General Commands Manual tpm2_policynv(1) (NAME) tpm2_policynv - NV (SYNOPSIS) tpm2_policynv [OPTIONS] [ARGUMENT] [ARGUMENT] (DESCRIPTION) tpm2_policynv(1) - NV . - () NV NV "TPM2_HR_NV_INDEX" () . NV operandA operandB . : o "eq" operandA = operandB o "neq" operandA != operandB o "sgt" signed operandA > signed operandB o "ugt" unsigned operandA > unsigned operandB o "slt" signed operandA < signed operandB o "ult" unsigned operandA < unsigned operandB o "sge" signed operandA >= signed operandB o "uge" unsigned operandA >= unsigned operandB o "sle" signed operandA <= unsigned operandB o "ule" unsigned operandA <= unsigned operandB o "bs" operandA operandB o "bc" operandA operandB () (OPTIONS) o -C, --hierarchy=OBJECT: . : o o TPM_RH_OWNER o p TPM_RH_PLATFORM o nv-index . -C . -p tpm2_nvdefine(1) . o -P, --auth=AUTH: . o -L, --policy=FILE: (policy digest). o -S, --session=FILE: -S tpm2_startauthsession . o --offset=NATURAL_NUMBER: NV . NV . o --cphash=FILE . cpHash . : cpHash . o -i, --input=FILE: NV . operandB . "-" stdin . (References) (COMMON OPTIONS) . o -h, --help=[man|no-man]: . man . "man" "man" man stderr . "no-man" stdout . MANPATH man(1) . o -v, --version: TCTI . o -V, --verbose: . . o -Q, --quiet: stdout. o -Z, --enable-errata: (errata fixups). TPM . TPM2TOOLS_ENABLE_ERRATA . o -z, --pwd-session: HMAC . (clear text) TPM . unsalted OpenSSL FIPS . auth salted . o -R, --autoflush: (autoflush) . . TPM2TOOLS_AUTOFLUSH yes true . TCTI (TCTI Configuration) TCTI "Transmission Interface" TPM . TCTI TPM . TCTI : 1. -T --tcti 2. : TPM2TOOLS_TCTI. : (override) . TCTI : o tabrmd - tabrmd . tabrmd abrmd tcti . o mssim - TPM . o device - TPM . o none - TPM . TPM TCTI . TCTI . "none" . : : . TCTI (TCTI Defaults) TCTI TCTI dlopen(3) . TCTI tabrmd device mssim . -v TCTI . - "default-tcti" TCTI . TCTI (Custom TCTIs) TCTI TCTI . dlopen(3) tcti-name . dlopen(3) . TCTI (TCTI OPTIONS) TCTI : o device: TCTI (device) TPM TCTI . /dev/tpm0 . : -T device:/dev/tpm0 export TPM2TOOLS_TCTI="device:/dev/tpm0" o mssim: TCTI (mssim) IP . 127.0.0.1 2321 . : -T mssim:host=localhost,port=2321 export TPM2TOOLS_TCTI="mssim:host=localhost,port=2321" o abrmd: TCTI abrmd `,' . `=' . o TCTI abrmd : 1. `bus_name' : tabrmd ( ). 2. `bus_type' : dbus ( ) `session' `system'. tcti tabrmd bus_name=com.example.FooBar: \--tcti=tabrmd:bus_name=com.example.FooBar tcti (abrmd) bus_type=session: \--tcti:bus_type=session : abrmd tabrmd . TCTI . (EXAMPLES) NV . NV : 0xAA. NV . NV 0xAA (Define the test NV Index and write the value 0xAA to it) nv_test_index=0x01500001 tpm2_nvdefine -C o -p nvpass $nv_test_index -a "authread|authwrite" -s 1 echo "aa" | xxd -r -p | tpm2_nvwrite -P nvpass -i- $nv_test_index policynv (Attempt defining policynv with wrong comparison value specified in options) tpm2_startauthsession -S session.ctx --policy-session ### echo "bb" | xxd -r -p | tpm2_policynv -S session.ctx -L policy.nv -i- 0x1500001 eq -P nvpass tpm2_flushcontext session.ctx policynv (Attempt defining policynv with right comparison value specified in options) tpm2_startauthsession -S session.ctx --policy-session ### echo "aa" | xxd -r -p | tpm2_policynv -S session.ctx -L policy.nv -i- 0x1500001 eq -P nvpass tpm2_flushcontext session.ctx (RETURNS) : o 0 - . o 1 - . o 2 - . o 3 - . o 4 - TCTI. o 5 - (Non supported scheme). tpm2_testparams. (LIMITATIONS) tpm2_startauthsession(1) : o o tpm2-abrmd. . (BUGS) (Github Issues) (HELP) (Mailing List) (LICENSE) Creative Commons Attribution 4.0 International License (CC BY 4.0) . tpm2-tools tpm2_policynv(1)