1tss2_provision(1)           General Commands Manual          tss2_provision(1)
2
3
4

NAME

6       tss2_provision(1) -
7

SYNOPSIS

9       tss2_provision [OPTIONS]
10

DESCRIPTION

12       tss2_provision(1) - This command provisions a FAPI instance and its as‐
13       sociated TPM.  The steps taken are:
14
15       · Retrieve the EK template, nonce and  certificate,  verify  that  they
16         match the TPM’s EK and store them in the key store.
17
18       · Set  the  authValues  and policies for the Owner (Storage Hierarchy),
19         the Privacy Administrator (Endorsement Hierarchy) and the lockout au‐
20         thority.
21
22       · Scan  the  TPM’s nv indices and create entries in the metadata store.
23         This operation MAY use a heuristic to guess the originating  programs
24         for nv indices found and name the entries accordingly.
25
26       · Create  the SRK (storage primary key) inside the TPM and make it per‐
27         sistent if required by the FAPI configuration and stored its metadata
28         in  the  system-wide metadata store.  Note that the SRK will not have
29         an authorization value associated.
30
31       If an authorization value is associated with the storage hierarchy,  it
32       is  highly RECOMMENDED that the SRK without authorization value is made
33       persistent.
34

OPTIONS

36       These are the available options:
37
38       · -E, --authValueEh STRING: The authorization value for the privacy ad‐
39         min, i.e. the endorsement hierarchy.  Optional parameter.
40
41       · -S,  --authValueSh  STRING:  The  authorization  value for the owner,
42         i.e. the storage hierarchy.  Optional parameter.
43
44       · -L, --authValueLockout STRING: The authorization value for the  lock‐
45         out authorization.  Optional parameter.
46

COMMON OPTIONS

48       This  collection of options are common to all tss2 programs and provide
49       information that many users may expect.
50
51       · -h, --help [man|no-man]: Display the tools manpage.  By  default,  it
52         attempts  to  invoke  the  manpager for the tool, however, on failure
53         will output a short tool summary.  This is the same behavior  if  the
54         “man”  option argument is specified, however if explicit “man” is re‐
55         quested, the tool will provide errors from man  on  stderr.   If  the
56         “no-man”  option  if  specified, or the manpager fails, the short op‐
57         tions will be output to stdout.
58
59         To successfully use the manpages feature requires the manpages to  be
60         installed or on MANPATH, See man(1) for more details.
61
62       · -v,  --version:  Display version information for this tool, supported
63         tctis and exit.
64

EXAMPLE

66              tss2_provision
67

RETURNS

69       0 on success or 1 on failure.
70

BUGS

72       Github Issues (https://github.com/tpm2-software/tpm2-tools/issues)
73

HELP

75       See the Mailing List (https://lists.01.org/mailman/listinfo/tpm2)
76
77
78
79tpm2-tools                        APRIL 2019                 tss2_provision(1)