1CREATELOADED(1)                  User Commands                 CREATELOADED(1)
2
3
4

NAME

6       createloaded - Runs TPM2 createloaded
7

DESCRIPTION

9       createloaded
10
11       Runs TPM2_CreateLoaded
12
13       -hp parent handle (can be hierarchy)
14
15              40000001 Owner 4000000c Platform 4000000b Endorsement
16
17              [Asymmetric Key Algorithm]
18
19       -rsa (default)
20
21       -ecc curve
22
23              bnp256 nistp256 nistp384
24
25              Key attributes
26
27       -bl    data blob for unseal (create only) -if     data file name
28
29       -den   decryption, (unrestricted, RSA and EC NULL scheme)
30
31       -deo   decryption, (unrestricted, RSA OAEP, EC NULL scheme)
32
33       -des   encryption/decryption,  AES symmetric [-116 for TPM rev 116 com‐
34              patibility]
35
36       -st    storage (restricted) [default for primary keys]
37
38       -si    unrestricted signing (RSA and EC NULL scheme)
39
40       -sir   restricted signing (RSA RSASSA, EC ECDSA scheme)
41
42       -dau   unrestricted ECDAA signing key pair
43
44       -dar   restricted ECDAA signing key pair
45
46       -kh    keyed hash (hmac)
47
48       -dp    derivation parent
49
50       -gp    general purpose, not storage
51
52       [-kt   (can be specified more than once)] f       fixedTPM (default for
53              primary   keys   and  derivation  parents)  p        fixedParent
54              (default for primary keys and  derivation  parents)  nf       no
55              fixedTPM  (default  for non-primary keys) np      no fixedParent
56              (default for non-primary keys)
57
58       [-da   object subject to DA protection (default no)]
59
60       [-pol  policy file (default empty)]
61
62       [-uwa  userWithAuth attribute clear (default set)]
63
64       [-nalg name hash algorithm  (sha1,  sha256,  sha384,  sha512)  (default
65              sha256)]
66
67       [-halg scheme  hash  algorithm  (sha1, sha256, sha384, sha512) (default
68              sha256)]
69
70       [-der  object's parent is a derivation parent]
71
72       [-pwdk password for key (default empty)]
73
74       [-pwdp password for parent key (default empty)]
75
76       [-opu  public key file name (default do not save)]
77
78       [-opr  private key file name (default do not save)]
79
80       [-opem public key PEM format file name (default do not save)]
81
82       -se[0-2] session handle / attributes (default PWAP)
83
84       01     continue
85
86       20     command decrypt
87
88       40     response encrypt
89
90
91
92createloaded 1308                 August 2018                  CREATELOADED(1)