tpm_sealdata(1)
tpm_sealdata(1) π
TPM Management β tpm_sealdata, from the General Commands Manual bestie section of the group chat β¨
πΈ NAME πΈ
tpm_sealdata β seal input data to the system's TPM π«Άπ
β¨ SYNOPSIS β¨
tpm_sealdata [OPTION]
π DESCRIPTION π
okay so picture this: you have sensitive input data and you want it locked tf down. tpm_sealdata seals that data to the SRK of your system's TPM, and optionally to a PCR configuration too. main character encryption energy fr fr π
β οΈ bestie BACK UP YOUR DATA β οΈ it is unrecoverable from this format if the SRK changes or if the specified PCR configuration can't be reproduced. like, gone gone. no cap. π
The result can be unsealed by functions in libtpm_unseal, such as tpmUnsealFile(3). iconic.
π OPTIONS π
-h,--helpβ Display command usage info. the "wait what does this do again" button π-v,--versionβ Display command version info. vibe check on the version β¨-l,--log [none|error|info|debug]β Set logging level. pick your yap level:none,error,info, ordebugπ-i,--infile FILEβ File containing input data to seal. drop the file here, bestie π-o,--outfile FILEβ Output file. Default isSTDOUT. no file? it just yells into your terminal, slay π€-p,--pcr NUMBERβ Seal data to the current value of the specified pcr. This option can be givenNUM_PCRStimes. The specified pcr is in the range of0toNUM_PCRS-1.NUM_PCRSis at least16but may vary by platform. stack these like friendship bracelets, one per pcr π-z,--well-knownβ UseTSS_WELL_KNOWN_SECRET(20 zero bytes) as the SRK password. You will not be prompted for the SRK password with this option. skipping the password prompt entirely, lowkey a flex π₯-u,--unicodeβ Use TSS UNICODE encoding for the SRK password to comply with applications using TSS popup boxes. for the apps that insist on being extra π
π¦ SEE ALSO π¦
tpm_takeownership(8), tpmUnsealFile(3)
π REPORTING BUGS π
Report bugs to <trousers-users@lists.sourceforge.net>
TPM Management Β· 2005-08-10
and that's the whole page bestie, mwah π π thanks for reading, go seal something responsibly, xoxo π
π¦ where this page comes from
- debian bookworm: tpm-tools 1.3.9.2-0.1 Β· CPL
- debian trixie: tpm-tools 1.3.9.2-0.2 Β· CPL
- epel 10: tpm-tools 1.3.9-19.el10_0 Β· CPL-1.0
- epel 9: tpm-tools 1.3.9-13.el9 Β· CPL
- fedora 43: tpm-tools 1.3.9.2-5.fc43 Β· CPL-1.0
- fedora 43: tpm-tools 1.3.9.2-5.fc43 Β· CPL-1.0
- fedora 44: tpm-tools 1.3.9.2-6.fc44 Β· CPL-1.0
- fedora 44: tpm-tools 1.3.9.2-6.fc44 Β· CPL-1.0
- nixos 26.05: tpm-tools 1.3.9.2
- nixpkgs unstable: netbsd-source 11.0
- nixpkgs unstable: tpm-tools 1.3.9.2
- opensuse-leap 16.0: tpm-tools 1.3.9.2-160000.2.2 Β· IPL-1.0
- opensuse-leap 16.0: tpm-tools 1.3.9.2-160000.2.2 Β· IPL-1.0
- opensuse-leap 16.0: tpm-tools 1.3.9.2-160000.2.2 Β· IPL-1.0
- opensuse-leap 16.0: tpm-tools 1.3.9.2-160000.2.2 Β· IPL-1.0
- ubuntu jammy: tpm-tools 1.3.9.1-0.2ubuntu4
- ubuntu noble: tpm-tools 1.3.9.2-0.2build2 Β· CPL
- ubuntu questing: tpm-tools 1.3.9.2-0.2build2
- ubuntu resolute: tpm-tools 1.3.9.2-0.2build3 Β· CPL
- ubuntu stonking: tpm-tools 1.3.9.2-0.2build4 Β· CPL
- Copyright (C) 2005 International Business Machines Corporation
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms