1tpm_createek(8)             System Manager's Manual            tpm_createek(8)
2
3
4
5                        TPM Management - tpm_createek
6

NAME

8       tpm_createek - create an Endorsement Key Pair on the TPM
9

SYNOPSIS

11       tpm_createek [OPTION]
12
13

DESCRIPTION

15       tpm_createek creates and Endorsement Key Pair on the TPM (via the
16       TPM_CreateEndorsementKeyPair API).  This should rarely be required as
17       the Endorsement Key is normally installed as part of manufacturing.
18       However, you might need to run this command once if commands such as
19       tpm_getpubek are returning error code 35 from the TPM layer.
20
21
22       -h, --help
23              Display command usage info.
24
25       -v, --version
26              Display command version info.
27
28       -l, --log [none|error|info|debug]
29              Set logging level.
30
31

OPTIONS VALID ONLY FOR TPM VERSION 1.2

33       -r, --revocable
34              Creates a revocable key pair instead of non-revocable one.
35              Requires secret data (either -g -o or -i - see below).
36
37       -i, --infile [input file]
38              Specifies the file that contains the secret data used as revoke
39              data do the new revocable EK pair. Only the first 20 bytes of
40              this file  are used and the remaining ones are ignored.
41
42       -g, --generate-secret
43              Generates a random 20 bytes value that is used as the EK pair
44              revocable secret data. Requires -o (see below).
45
46       -o, --outfile [output file]
47              Specifies the file to write the generated revocable secret data
48              to, for further use.
49
50

SEE ALSO

52       tpm_version(1), tpm_getpubek(8), tcsd(8)
53
54

REPORTING BUGS

56       Report bugs to <trousers-users@lists.sourceforge.net>
57
58
59
60TPM Management                    2005-05-05                   tpm_createek(8)