1tss2_quote(1)               General Commands Manual              tss2_quote(1)
2
3
4

NAME

6       tss2_quote(1) -
7

SYNOPSIS

9       tss2_quote [OPTIONS]
10

DESCRIPTION

12       tss2_quote(1)  -  This  command  performs an attestation using the TPM.
13       The PCR bank for each provided PCR index is set  in  the  cryptographic
14       profile.
15

OPTIONS

17       These are the available options:
18
19       · -x, --pcrList STRING:
20
21         An array holding the PCR indices to quote against.
22
23       · -Q, --qualifyingData FILENAME or - (for stdin):
24
25         A  nonce provided by the caller to ensure freshness of the signature.
26         Optional parameter.
27
28       · -l, --pcrLog FILENAME or - (for stdout):
29
30         Returns the PCR log for the chosen PCR.  Optional parameter.
31
32         PCR event logs are a list (arbitrary length JSON array)  of  log  en‐
33         tries with the following content.
34
35                - recnum: Unique record number
36                - pcr: PCR index
37                - digest: The digests
38                - type: The type of event. At the moment the only possible value is: "LINUX_IMA" (legacy IMA)
39                - eventDigest: Digest of the event; e.g. the digest of the measured file
40                - eventName: Name of the event; e.g. the name of the measured file.
41
42       · -f, --force:
43
44         Force overwriting the output file.
45
46       · -p, --keyPath STRING:
47
48         Identifies the signing key.
49
50       · -q, --quoteInfo FILENAME or - (for stdout):
51
52         Returns  a JSON-encoded structure holding the inputs to the quote op‐
53         eration.  This includes the digest value and PCR values.
54
55       · -o, --signature FILENAME or - (for stdout):
56
57         Returns the signature over the quoted material.
58
59       · -c, --certificate FILENAME or - (for stdout):
60
61         The certificate associated with keyPath in PEM format.  Optional  pa‐
62         rameter.
63

COMMON OPTIONS

65       This  collection of options are common to all tss2 programs and provide
66       information that many users may expect.
67
68       · -h, --help [man|no-man]: Display the tools manpage.  By  default,  it
69         attempts  to  invoke  the  manpager for the tool, however, on failure
70         will output a short tool summary.  This is the same behavior  if  the
71         “man”  option argument is specified, however if explicit “man” is re‐
72         quested, the tool will provide errors from man  on  stderr.   If  the
73         “no-man”  option  if  specified, or the manpager fails, the short op‐
74         tions will be output to stdout.
75
76         To successfully use the manpages feature requires the manpages to  be
77         installed or on MANPATH, See man(1) for more details.
78
79       · -v,  --version:  Display version information for this tool, supported
80         tctis and exit.
81

EXAMPLE

83              tss2_quote --keyPath HS/SRK/quotekey --pcrList "10,16" --qualifyingData qualifyingData.file --signature signature.file --pcrLog pcrLog.file --certificate certificate.file --quoteInfo quoteInfo.info
84

RETURNS

86       0 on success or 1 on failure.
87

BUGS

89       Github Issues (https://github.com/tpm2-software/tpm2-tools/issues)
90

HELP

92       See the Mailing List (https://lists.01.org/mailman/listinfo/tpm2)
93
94
95
96tpm2-tools                        APRIL 2019                     tss2_quote(1)