1tpm_revokeek(8) System Manager's Manual tpm_revokeek(8)
2
3
4
5 TPM Management - tpm_revokeek
6
8 tpm_revokeek - revokes the Endorsement Key Pair of the TPM
9
11 tpm_revokeek [OPTION]
12
13
15 tpm_revokeek clears the TPM revocable Endorsement Key Pair (via the
16 TPM_RevokeEndorsementKey API). This command erases all counters (except
17 the base one), erases the Ek, the SRK, the owner auth and any NVRAM
18 locked to the owner auth. It does not touch the delegation tables or
19 other NVRAM.
20
21
22 -h, --help
23 Display command usage info.
24
25 -v, --version
26 Display command version info.
27
28 -l, --log [none|error|info|debug]
29 Set logging level.
30
31 -i, --infile [input file]
32 Specifies the file that contains the authorization information
33 required to revoke the Ek (secret data generated during the
34 revocable Ek creation process). Only the first 20 bytes of this
35 file are used and the remaining ones are ignored.
36
37
39 tpm_version(1), tpm_createek(8), tpm_getpubek(8), tcsd(8)
40
41
43 Report bugs to <trousers-users@lists.sourceforge.net>
44
45
46
47TPM Management 2007-10-22 tpm_revokeek(8)