tpm_changeownerauth8

Usage

TPM Management - tpm_changeownerauth

Overview

tpm_changeownerauth allows for changing the authorization data for the TPM owner or the TPM's Storage Root Key (via the TPM_ChangeAuthOwner API). This operation prompts for current password, followed by the new password and a confirmation of the new password. The --owner option changes the TPM owner password and --srk option changes the TPM's SRK password. The --well-known option is used when SRK or owner passwords need to be changed and current owner password is a secret of zeros, --set-well-known option changes current password to a secret of zeros, both options do not work by themselves, they must be used with --owner and --srk options to indicate which of these passwords will be changed.

-h, --help

Display command usage info.

-v, --version

Display command version info.

-l, --log [none|error|info|debug]

Set logging level.

-u, --unicode

Use TSS UNICODE encoding for passwords to comply with applications using TSS popup boxes

-o, --owner

Change the authorization data for the TPM owner.

-s, --srk

Change the authorization data for the TPM's Storage Root Key.

-g, --original_password_unicode

Use TSS UNICODE encoding for original password to comply with applications using TSS popup boxes

-n, --new_password_unicode

Use TSS UNICODE encoding for new password to comply with applications using TSS popup boxes

-z, --well-known

Change password to a new one when current owner password is a secret of all zeros (20 bytes of zeros). It must be specified which password (owner, SRK or both) to change

-r, --set-well-known

Change password to a secret of all zeros (20 bytes of zeros). It must be specified which password (owner, SRK or both) to change

tpm_version(1), tpm_takeownership(8), tcsd(8)