tpm_mkaik(8)

tpm_mkaik8

Make a tpm attestation identity key

Usage

tpm_mkaik [-zuhv] BLOB-FILE PUBKEY-FILE

Overview

The program generates a TPM Attestation Identity Key and stores it in the file BLOB-FILE. The public key is stored in the file PUBKEY-FILE. The public key is DER encoded.

-z

Use the well known secret used as the owner secret.

-u

Use TSS UNICODE encoding for passwords.

-h

Display command usage info.

-v

Display command version info.

Releases

Unchanged in 4 releases since Debian 10 (Buster).

  1. 10–13

Bugs

Sometimes, when tpm_mkaik is invoked without the -z option, no password prompt appears. As a work around, use tpm_changeownerauth to set the secret to the well known one, generate the key, and then use tpm_changeownerauth to set the secret to its original value.

From tpm-quote-tools 1.0.4-1+b3 in Debian 13 (Trixie). Parsed by carta from the page's man source.