1tss2_createnv(1) General Commands Manual tss2_createnv(1)
2
6 tss2_createnv(1) -
7
9 tss2_createnv [OPTIONS]
10
12 fapi-config(5) to adjust Fapi parameters like the used cryptographic
13 profile and TCTI or directories for the Fapi metadata storages.
14 fapi-profile(5) to determine the cryptographic algorithms and parame‐
16 ters for all keys and operations of a specific TPM interaction like the
17 name hash algorithm, the asymmetric signature algorithm, scheme and pa‐
18 rameters and PCR bank selection.
19
21 tss2_createnv(1) - This command creates an NV index in the TPM.
22
24 These are the available options:
25 • -p, --path=STRING:
27 Path of the new NV space.
29 The path is composed of three elements, separated by “/”. An nvPath
31 starts with “/nv”. The second path element identifies the NV handle
32 range for the nv object. This includes the following values: Owner,
33 TPM, Platform, Endorsement_Certificate, Platform_Certificate, Compo‐
34 nent_OEM, TPM_OEM, Platform_OEM, PC-Client, Server, Virtualized_Plat‐
35 form, MPWG, Embedded. The third path element identifies the actual
36 NV-Index using a meaningful name.
37 • -t, --type=STRING:
39 Identifies the intended usage. Optional parameter. Types may be any
41 comma-separated combination of:
42 - "noda": Sets the noda attribute of a key or NV index.
44 - "bitfield": Sets the NV type to bitfield.
45 - "counter": Sets the NV type to counter.
46 - "pcr": Sets the NV type to pcr-like behavior.
47 - Hint: If none of the previous three keywords is provided a regular NV
48 index is created.
49 • -s, --size=INTEGER:
51 The size in bytes of the NV index to be created. Can be omitted if
53 size can be inferred from the type; e.g. an NV index of type counter
54 has a size of 8 bytes.
55 • -P, --policyPath=STRING:
57 Identifies the policy to be associated with the new NV space. Op‐
59 tional parameter. If omitted then no policy will be associated with
60 the key.
61 A policyPath is composed of two elements, separated by “/”. A poli‐
63 cyPath starts with “/policy”. The second path element identifies the
64 policy or policy template using a meaningful name.
65 • -a, --authValue=STRING:
67 The new UTF-8 password. Optional parameter. If it is neglected then
69 the user is queried interactively for a password. To set no pass‐
70 word, this option should be used with the empty string (""). The
71 maximum password size is determined by the digest size of the chosen
72 name hash algorithm in the cryptographic profile (cf., fapi-pro‐
73 file(5)). For example, choosing SHA256 as hash algorithm, allows
74 passwords of a maximum size of 32 characters.
75
77 This collection of options are common to all tss2 programs and provide
78 information that many users may expect.
79 • -h, --help [man|no-man]: Display the tools manpage. By default, it
81 attempts to invoke the manpager for the tool, however, on failure
82 will output a short tool summary. This is the same behavior if the
83 “man” option argument is specified, however if explicit “man” is re‐
84 quested, the tool will provide errors from man on stderr. If the
85 “no-man” option if specified, or the manpager fails, the short op‐
86 tions will be output to stdout.
87 To successfully use the manpages feature requires the manpages to be
89 installed or on MANPATH, See man(1) for more details.
90 • -v, --version: Display version information for this tool, supported
92 tctis and exit.
93
95 tss2_createnv --authValue=abc --path=/nv/Owner/myNV --size=20 --type="noDa"
96
98 0 on success or 1 on failure.
99
101 Github Issues (https://github.com/tpm2-software/tpm2-tools/issues)
102
104 See the Mailing List (https://lists.linuxfoundation.org/mailman/listin‐
105 fo/tpm2)
106tpm2-tools APRIL 2019 tss2_createnv(1)