tpm_takeownership(8)

Usage

tpm_takeownership [OPTION]

TPM Management - tpm_takeownership

Overview

tpm_takeownership setup an owner on the system's TPM (via the TPM_TakeOwnership API). This operation requires the TPM to be enabled and can be restricted by tpm_setownable. The command will prompt for owner and SRK passwords and confirmations of these if executed without either of the -well-known options, otherwise, a secret of all zeros is set for the requested password. After the second confirmation, be patient as the command may take awhile.

-h, --help: Display command usage info.

-v, --version: Display command version info.

-l, --log [none|error|info|debug]: Set logging level.

-u, --unicode: Use TSS UNICODE encoding for passwords to comply with applications using TSS popup boxes

-y, --owner-well-known: Set a secret of all zeros (20 bytes of zeros) as the owner's secret.

-z, --srk-well-known: Set a secret of all zeros (20 bytes of zeros) as the SRK secret.

Releases

Unchanged in 9 releases since Debian 5.0 (Lenny).

5.0–13

Referred to by

tpm_version(1) report TPM version and manufacturer information tpm_sealdata(1) seal input data to the system's TPM tpm_clear(8) return the TPM to the default state (unowned, disabled, inactive) tpm_getpubek(8) display the public portion of the TPM's Endorsement Key tpm_selftest(8) request TPM perform selftest and report tpm_setactive(8) change TPM active states tpm_setenable(8) change TPM enable states tpm_setownable(8) change whether the TPM allows tpm_takeownership operations tpm_restrictsrk(8) restrict the ability to access the Storage Root Key tpm_setclearable(8) disable TPM clear operations tpm_restrictpubek(8) restrict the ability to display the public portion of the Endorsement Key to the owner tpm_changeownerauth(8) change the authorization data associated with the owner or SRK tpm_setoperatorauth(8) sets the operator authorization value in the TPM

Usage

Overview

Releases

See also

Referred to by