1CREATE(1)                        User Commands                       CREATE(1)
2
3
4

NAME

6       create - Runs TPM2 create
7

DESCRIPTION

9       create
10
11       Runs TPM2_Create
12
13       -hp parent handle
14
15              [Asymmetric Key Algorithm]
16
17       -rsa (default)
18
19       -ecc curve
20
21              bnp256 nistp256 nistp384
22
23              Key attributes
24
25       -bl    data blob for unseal (create only) -if     data file name
26
27       -den   decryption, (unrestricted, RSA and EC NULL scheme)
28
29       -deo   decryption, (unrestricted, RSA OAEP, EC NULL scheme)
30
31       -des   encryption/decryption,  AES symmetric [-116 for TPM rev 116 com‐
32              patibility]
33
34       -st    storage (restricted) [default for primary keys]
35
36       -si    unrestricted signing (RSA and EC NULL scheme)
37
38       -sir   restricted signing (RSA RSASSA, EC ECDSA scheme)
39
40       -dau   unrestricted ECDAA signing key pair
41
42       -dar   restricted ECDAA signing key pair
43
44       -kh    keyed hash (hmac)
45
46       -dp    derivation parent
47
48       -gp    general purpose, not storage
49
50       [-kt   (can be specified more than once)] f       fixedTPM (default for
51              primary   keys   and  derivation  parents)  p        fixedParent
52              (default for primary keys and  derivation  parents)  nf       no
53              fixedTPM  (default  for non-primary keys) np      no fixedParent
54              (default for non-primary keys)
55
56       [-da   object subject to DA protection (default no)]
57
58       [-pol  policy file (default empty)]
59
60       [-uwa  userWithAuth attribute clear (default set)]
61
62       [-nalg name hash algorithm  (sha1,  sha256,  sha384,  sha512)  (default
63              sha256)]
64
65       [-halg scheme  hash  algorithm  (sha1, sha256, sha384, sha512) (default
66              sha256)]
67
68       [-pwdk password for key (default empty)]
69
70       [-pwdp password for parent key (default empty)]
71
72       [-opu  public key file name (default do not save)]
73
74       [-opr  private key file name (default do not save)]
75
76       [-opem public key PEM format file name (default do not save)]
77
78       [-tk   output ticket file name (default do not save)]
79
80       [-ch   output creation hash file name (default do not save)]
81
82       -se[0-2] session handle / attributes (default PWAP)
83
84       01     continue
85
86       20     command decrypt
87
88       40     response encrypt
89
90
91
92create 1308                       August 2018                        CREATE(1)