1LCP_CRTPOLLIST(8)                User Manuals                LCP_CRTPOLLIST(8)
2
3
4

NAME

6       lcp_crtpollist - create an Intel(R) TXT policy list
7

SYNOPSIS

9       lcp_crtpollist COMMAND [OPTION]
10

DESCRIPTION

12       lcp_crtpollist is used to create an Intel(R) TXT policy list.
13

OPTIONS

15       --create
16              Create an TXT policy list. The following options are available:
17
18              --out file        policy list file
19
20              [--ver version]   version
21
22              [file]...         policy element files
23
24       --sigh Sign an TXT policy list.
25
26              --pub key-file    PEM file of public key
27
28              --out file        policy list file
29
30              [--priv key-file] PEM file of private key
31
32              [--rev rev-ctr]   revocation counter value
33
34              [--nosig]         don't add SigBlock
35
36       --addsig
37
38              --sig file        file containing signature (big-endian)
39
40              --out file        policy list file
41
42       --show file
43              policy list file
44
45       --help Print out the help message.
46
47       --verbose
48              Enable verbose output; can be specified with any command.
49

EXAMPLES

51   Create policy list:
52       Assuming  there have been two element file mle.elt and pconf.elt gener‐
53       ated by lcp_crtpolelt(8) The following example can create  an  unsigned
54       policy list:
55
56       lcp_crtpollist --create --out list-unsig.lst mle.elt pconf.elt
57
58   Sign policy list:
59       Unsigned  policy list can be signed by the command lcp_crtpollist(8) or
60       openssl(1).  The openssl(1) signing is supported for  cases  where  the
61       signing  environment  is  separate from the policy creation environment
62       and the software allowed  to  run  there  is  strictly  controlled  and
63       already supports openssl(1).
64
65       The following example uses openssl(1) to sign the list:
66
67
68       1   openssl rsa -pubout -in privkey.pem -out pubkey.pem
69       2   cp list-unsig.lst list-sig.lst
70       3   lcp_crtpollist --sigh --pub pubkey.pem --nosig --out list-sig.lst
71       4   openssl genrsa -out privkey.pem 2048
72       5   openssl dgst -sha1 -sign privkey.pem -out list.sig list-sig.lst
73       6   lcp_crtpollist --addsig --sig list.sig --out list-sig.lst
74
75       lcp_crtpollist  can  also  be used to sigh a policy list. The following
76       example are intended to be mutually exclusive with the preceding  exam‐
77       ple.
78
79
80       1   openssl genrsa -out privkey.pem 2048
81       2   openssl rsa -pubout -in privkey.pem -out pubkey.pem
82       3   cp list-unsig.lst list-sig.lst
83       4   lcp_crtpollist  --sign  --pub  pubkey.pem  --priv privkey.pem --out
84           list-sig.lst
85
86

SEE ALSO

88       lcp_crtpol2(8), lcp_crtpolelt(8), lcp_crtpollist(8), openssl(1).
89
90
91
92tboot                             2011-12-31                 LCP_CRTPOLLIST(8)
Impressum