tpm2_changeeps(1) on Linux
The text fe4865a877eb, as Debian 12 (Bookworm) shipped it.
Replaces the active endorsement primary seed with a new one generated off the TPM2 RNG.
Flags it lists
-
--auth -
--cphash -
--rphash -
--session -
-S -
-p