tpm2_changeeps(1) on Linux
The text 49ea01fbac3a, as Debian 13 (Trixie) shipped it.
Replaces the active endorsement primary seed with a new one generated off the TPM2 RNG.
Flags it lists
-
--auth -
--cphash -
--rphash -
--session -
-S -
-p