1LCP_MLEHASH(8)                   User Manuals                   LCP_MLEHASH(8)
2
3
4

NAME

6       lcp_mlehash  -  generate a SHA-1 hash of a TXT MLE binary file suitable
7       for use in a TXT launch control policy
8

SYNOPSIS

10       lcp_mlehash [-v] [-c cmdline] [-h] mle-file
11

DESCRIPTION

13       lcp_mlehash is used to generate a SHA-1 hash of the portion of an  exe‐
14       cutable file that contains the Intel® TXT measured launched environment
15       (MLE).  In the MLE binary file, the portion of the file to be  used  as
16       the  MLE  is specified in the MLE header structure.  If verbose mode is
17       not used, the output is  suitable  for  use  as  the  mle-file  to  the
18       lcp_crtpol and lcp_crtpolelt commands.
19

OPTIONS

21       mle-file
22              File  name of the MLE binary.  If it is a gzip file then it will
23              be un-ziped before hashing.
24
25       -v     Verbose mode, display progress indications.
26
27       -c cmdline
28              Specify quote-delimited command line. It is important to specify
29              the command line that is used when launching the MLE or the hash
30              will not match what is calculated by SINIT.
31
32       -h     Print out the help message.
33

EXAMPLES

35       lcp_mlehash -c "logging=memory,serial,vga" /boot/tboot.gz > mle-hash
36

SEE ALSO

38       lcp_readpol(8), lcp_writepol(8), lcp_crtpol(8), lcp_crtpolelt(8).
39
40
41
42tboot                             2011-12-31                    LCP_MLEHASH(8)
Impressum