tpm2_eventlog(1)

✨ NAME ✨

tpm2_eventlog(1) — Display tpm2 event log.

Okay so this is the tpm2_eventlog(1) page from the General Commands Manual, and it's literally here to help you parse a binary TPM2 event log. We're gonna walk through it together, bestie 💖.

💅 SYNOPSIS 💅

tpm2_eventlog [ARGUMENT]

yes, that's the whole vibe: pass it an ARGUMENT when you use it. 🦋

🌸 DESCRIPTION 🌸

tpm2_eventlog(1) parses a binary TPM2 event log. The event log may be passed to the tool as the final positional parameter. If this parameter is omitted, the tool will return an error — no silent guessing, bestie 😭. The format of this log is documented in the “TCG PC Client Platform Firmware Profile Specification”. That's the official lore 🦋.

🎀 OPTIONS 🎀

• --eventlog-version=NATURAL_NUMBER — specifies the yaml version of the parsed event log. Currently versions 1 and 2 are supported. The default is 1. ✨
• ARGUMENT — the command line argument is the path to a binary TPM2 eventlog. That's your file, bestie 🫶.

📚 References

No extra reference entries are listed here in the original. It's literally just the heading hanging out, so no extra refs to add.

🫶 COMMON OPTIONS 🫶

This collection of options is common to many programs and gives you information that many users may expect. Group-chat fave behavior, honestly. 💅

• -h, --help=[man|no-man] — displays the tool's manpage. By default, it attempts to invoke the manpager for the tool, however, on failure it will output a short tool summary. This is the same behavior if the man option argument is specified, however if explicit man is requested, the tool will provide errors from man on stderr. If the no-man option is specified, or the manpager fails, the short options will be output to stdout. To successfully use the manpages feature requires the manpages to be installed or on MANPATH; see man(1) for more details. 💅
• -v, --version — displays version information for this tool and supported tctis, then exits. 👑
• -V, --verbose — increases the information that the tool prints to the console during its execution. When using this option, the file and line number are printed. 🔥
• -Q, --quiet — silences normal tool output to stdout. 🤫
• -Z, --enable-errata — enables the application of errata fixups. Useful if an errata fixup needs to be applied to commands sent to the TPM. Defining the environment variable TPM2TOOLS_ENABLE_ERRATA is equivalent. ⭐
• -z, --pwd-session — uses a password session instead of a HMAC session for authentication. A clear text password is passed to the TPM to authorize the action. This option can be used to avoid problems when unsalted sessions are used in OpenSSL FIPS mode. If auth values are used, a salted session should be used for authentication. 🔐
• -R, --autoflush — enables autoflush for transient objects created by the command. If a parent object is loaded from a context file, also the transient parent object will be flushed. Autoflush can also be activated if the environment variable TPM2TOOLS_AUTOFLUSH is set to yes or true. And the original page literally tacks on information many users may expect. at the end of this bullet, so I'm keeping that little loose thread too, bestie 💀🫶.

💖 EXAMPLES 💖

Here's the example, exactly as the page gives it, no cap:

# display eventlog from provided file
tpm2_eventlog eventlog.bin

🔥 Returns 🔥

Tools can return any of the following codes:

• 0 — Success. ✅
• 1 — General non-specific error. 😭
• 2 — Options handling error. 💀
• 3 — Authentication error. 🔐
• 4 — TCTI related error. 🌀
• 5 — Non supported scheme. Applicable to tpm2_testparams. 🙈

💀 BUGS 💀

Github Issues — that's what the page says, bestie. No extra bug lore listed here. 🫶

🧚 HELP 🧚

See the Mailing List. That's the whole help section, iykyk 💌.

👑 License 👑

This work is licensed under the Creative Commons Attribution 4.0 International License (CC BY 4.0).

k bye bestie 🎀 — source/version: tpm2-tools; page: tpm2_eventlog(1); date: not listed in the original footer. 💖