LOAD_TPM2_KEY(1)

📦 version 4.3.0, in opensuse-leap 16.0

💖 LOAD_TPM2_KEY(1) 💖

okay so bestie, welcome to the load_tpm2_key page — it's a User Commands girlie and she's here to make your TPM life cute and permanent ✨

🎀 NAME 🎀

load_tpm2_key — load a tpm2 key at a permanent index 🫶

🌸 SYNOPSIS 🌸

load_tpm2_key [options] <filename> <nvindex>

🦋 DESCRIPTION 🦋

So like, this is the tool you use to load up keys that were made by create_tpm2_key(1) into a permanent NV index. Yes, permanent — she's not a guest, she's moving in 💅

Why would you even do that? Two whole reasons, and honestly both slay:

  • you want an unrestricted key that's always accessible to the TPM without needing a key file lying around, or
  • you want a new restricted decryption key parent, so other keys can be created as its children. main character energy, honestly 👑

✨ OPTIONS ✨

  • -b, --auth-parent <pwd> — specify the parent key password. the default is EmptyAuth (yes, no password, she's lowkey unlocked 🙈)
  • -f, --force — force loading of a key with policy. literally forcing it, no cap 💀
  • -h, --help — print this help message. the classic, the icon, the one everyone runs first 🎀

🌈 EXAMPLES 🌈

Example one: create a TPM internal key and load it at index 81000101

create_tpm2_key -p 81000001 tmp.key
load_tpm2_key tmp.key 81000101

Example two: create a wrapped restricted decryption key at 81000101 and use it as the parent of a new key 🌸

openssl genrsa 2048 > key.priv
create_tpm2_key --restricted -w key.priv key.tpm
load_tpm2_key key.tpm 81000101
create_tpm2_key -p 81000101 newkey.tpm

👑 AUTHOR 👑

Written by James Bottomley <James.Bottomley@HansenPartnership.com> — we stan 🫶

💀 REPORTING BUGS 💀

Report bugs to <openssl-tpm2-engine@groups.io>. not me asking you to be nice about it, but like… be nice about it 🥺

Copyright 2019 by James Bottomley License LGPL-2.1-only

fr fr, if something's broken, tell the mailing list before you tell me 💖

okay that's the whole page bestie, go load some keys, mwah 🧚💜

— load_tpm2_key version 4.3.0, dated August 2024, signing off ⭐💅

📦 where this page comes from