1TSSIMAEXTEND(1) User Commands TSSIMAEXTEND(1)
2
3
4
6 tssimaextend - Replay the IMA event log
7
9 Replays the provided IMA event log.
10
11 Without -sim, uses TPM2_PCR_Extend to extend the events into the TPM.
12 With -sim, extends into simulated PCRs and traces the result.
13
14 Without -sim, hash algorithms not allocated are ignored, the TPM behav‐
15 ior.
16 With -sim, all specified hash algorithms are used. If no hash algo‐
17 rithms are specified, defaults to sha1 and sha256.
18
19 Two IMA log formats are currently supported:
20
21 1: SHA1 - A zero padded measurement is extended into other PCR banks.
22 2: SHA1 - A digest of the template data is extended into other PCR
23 banks.
24
25 This handles the case where a zero measurement extends ones into the
26 IMA PCR.
27
28 -if IMA event log file name
29
30 [-of With -sim, PCR 10 of first algorithm specified]
31
32 [-le input file is little endian (default big endian)]
33
34 [-halg (sha1, sha256, sha384, sha512)]
35 -halg may be specified more than once
36
37 [-ty IMA log format (default type 1)]
38
39 [-tpm extend TPM PCRs (default)]
40
41 [-sim calculate simulated PCRs]
42
43 [-checkhash
44 verify IMA event log hashes]
45
46 [-b beginning entry (default 0, beginning of log)] A beginning entry
47 after the end of the log becomes a noop
48
49 [-e ending entry (default end of log)] E.g., -b 0 -e 0 sends one en‐
50 try
51
52 [-l time - run in a continuous loop, sleep 'time' seconds betwteen
53 loops] The intent is that this be run without specifying -b and
54 -e Afer each pass, the next beginning entry is set to the last
55 entry +1
56
57
58
59tssimaextend 1.6 January 2021 TSSIMAEXTEND(1)