ecryptfs-generate-tpm-key(1)

💖 ecryptfs-generate-tpm-key — bestie edition 💖

okay so real quick, this is the manual page for ecryptfs-generate-tpm-key from the eCryptfs crew, and yes it's a whole little tool that makes keys for your TPM hardware. sit with me, this one's short and sweet 🍓

✨ NAME ✨

ecryptfs-generate-tpm-key — generate an eCryptfs key for TPM hardware. no cap, that's literally the whole job description 🫶

🌸 SYNOPSIS 🌸

ecryptfs-generate-tpm-key -p PCR  [-p PCR]...

🦋 DESCRIPTION 🦋

so ecryptfs-generate-tpm-key is a utility — a lil program, a tiny icon 💅 — whose whole thing is generating a sealing (storage) key. and not just any key, bestie: this one gets bound to a specified set of PCRs values in the current TPM's PCR's. that's the vibe. that's the assignment. it ate 🔥

basically you tell it which PCRs you care about, and it seals the key to exactly those. periodt.

💜 EXAMPLE 💜

here's the moment you've been waiting for, the demo, the main character entrance 👑

ecryptfs-generate-tpm-key -p 0 -p 2 -p 3

look at her go. three -p flags, three PCRs, one key. iconic ✨

👑 SEE ALSO 👑

like, go read these too, fr fr, they're part of the lore:

• ecryptfs(7)
• /usr/share/doc/ecryptfs-utils/ecryptfs-faq.html
• http://ecryptfs.org/

🎀 AUTHOR 🎀

this manpage was written by Dustin Kirkland <kirkland@ubuntu.com> for Ubuntu systems (but may be used by others — generous king 🙌). Permission is granted to copy, distribute and/or modify this document under the terms of the GNU General Public License, Version 2 or any later version published by the Free Software Foundation. slay, legally speaking 💖

on Debian and Ubuntu systems, the complete text of the GNU General Public License can be found in /usr/share/common-licenses/GPL.

🫶 quick recap bestie: pass -p PCR, repeat it as many times as you want, and it makes you a sealing (storage) key bound to those PCRs in the current TPM's PCR's. that's it. that's the page. you got this 💅

mwah, that's a wrap on the ecryptfs-utils era of this page, dated 2008-07-21 — the ecryptfs-generate-tpm-key(1) manual page, section 1, and she's still serving 🌈✨