1Tspi_TPM_CMKSetRestrictions(L3i)brary Functions ManuTaslpi_TPM_CMKSetRestrictions(3)
2
3
4
5                   TCG Software Stack Developer's Reference
6

NAME

8       Tspi_TPM_CMKSetRestrictions - set restrictions on use of delegated Cer‐
9       tified Migratable Keys
10

SYNOPSIS

12       #include <tss/tspi.h>
13
14       TSS_RESULT Tspi_TPM_CMKSetRestrictions(TSS_HTPM hTPM, TSS_CMK_DELEGATE CmkDelegate);
15
16
17

DESCRIPTION

19       Tspi_TPM_CMKSetRestrictions is used to set restrictions on the delegat‐
20       ed use of Certified Migratable Keys (CMKs).  Use of this command cannot
21       itself be delegated.
22
23

PARAMETERS

25   hTPM
26       The hTPM parameter is used to specify the handle of the TPM object.
27
28   CmkDelegate
29       The CmkDelegate parameter is a bitmask describing  the  kinds  of  CMKs
30       that  can  be  used in a delegated auth session.  Each bit represents a
31       type of key.  If the bit of a key type is set, then the CMK can be used
32       in  a  delegated  authorization session, otherwise use of that key will
33       result in a TPM_E_INVALID_KEYUSAGE return code from the TPM.
34
35       The possible values of CmkDelegate are any combination of the following
36       flags logically OR'd together:
37
38
39       TSS_CMK_DELEGATE_SIGNING
40              Allow use of signing keys.
41
42
43       TSS_CMK_DELEGATE_STORAGE
44              Allow use of storage keys.
45
46
47       TSS_CMK_DELEGATE_BIND
48              Allow use of binding keys.
49
50
51       TSS_CMK_DELEGATE_LEGACY
52              Allow use of legacy keys.
53
54
55       TSS_CMK_DELEGATE_MIGRATE
56              Allow use of migratable keys.
57
58

RETURN CODES

60       Tspi_TPM_CMKSetRestrictions  returns  TSS_SUCCESS on success, otherwise
61       one of the following values is returned:
62
63       TSS_E_INVALID_HANDLE
64              hTPM is not a valid handle.
65
66
67       TSS_E_INTERNAL_ERROR
68              An internal SW error has been detected.
69
70

CONFORMING TO

72       Tspi_TPM_CMKSetRestrictions conforms to  the  Trusted  Computing  Group
73       Software Specification version 1.2 Errata A
74
75

SEE ALSO

77       Tspi_TPM_CMKApproveMA(3), Tspi_TPM_CMKCreateTicket(3), Tspi_Key_CMKCre‐
78       ateBlob(3)
79
80
81
82
83TSS 1.2                           2007-12-13    Tspi_TPM_CMKSetRestrictions(3)
Impressum