tss2_changeauth(1)

💅 NAME

tss2_changeauth(1) — bestie, this is the command that changes the authorization data (aka the password/secrets) of an entity, and that entity is referred to by its path. That's it, that's the whole vibe. ✨

🦋 SYNOPSIS

tss2_changeauth [OPTIONS]

🔍 SEE ALSO

• fapi-config(5) — lowkey the one you want when you need to adjust Fapi parameters, like the cryptographic profile it's using, the TCTI, or the directories for the Fapi metadata storages. 👑
• fapi-profile(5) — this one pins down the cryptographic algorithms and parameters for all keys and operations of a specific TPM interaction. We're talking the name hash algorithm, the asymmetric signature algorithm, scheme and parameters, and PCR bank selection. Fr fr, go read it. 🎀

---

💖 DESCRIPTION

tss2_changeauth(1) — that's the icon herself. (The OG page doesn't really elaborate here, so neither will I — the options below are doing all the talking. 🫶)

✨ OPTIONS ✨

These are the options you actually get to play with, bestie:

• -a, --authValue=STRING — the new UTF-8 password. It's optional, so if you just don't bother with it, the tool will ask you for a password interactively instead. Want no password at all? Then use this option with the empty string (""). And heads up: the max password size is determined by the digest size of the name hash algorithm you chose in the cryptographic profile (cf., fapi-profile(5)). So like, if you pick SHA256 as your hash algorithm, you get passwords up to a max size of 32 characters. No cap. 🔥
• -p, --entityPath=STRING — the path that identifies the entity you want to modify. Point her at the right thing, please. 🎯

🌈 COMMON OPTIONS

This lil collection right here is common to all tss2 programs — they provide info that many users just kinda expect to be there. 🧚

• -h, --help [man|no-man] — displays the tool's manpage. By default it tries to invoke the manpager for the tool, but if that fails it'll output a short tool summary instead. Same behavior if you specify the man option argument — but if you explicitly request man, the tool will give you errors from man on stderr. If you specify the no-man option, or the manpager just flops, the short options get output to stdout. 🫠

To successfully use the manpages feature, the manpages need to be installed or on MANPATH — see man(1) for more details, bestie. Don't skip the fine print. 💜

• -v, --version — displays version information for this tool, the supported tctis, and then exits. Slay. ⭐

---

🌸 EXAMPLES

Change a password for an entity HS/SRK/myRSACryptKey to M1

tss2_changeauth --entityPath=HS/SRK/myRSACryptKey --authValue=M1

Change a password for an entity HS/SRK/myRSACryptKey and ask the user to enter the password

tss2_changeauth --entityPath=HS/SRK/myRSACryptKey

🎀 RETURNS

0 on success or 1 on failure. That's the whole vibe check — binary, iconic, no in-between. 💅

💀 BUGS

Github Issues 📌

🫶 HELP

See the Mailing List 💌

👑 License

This work is licensed under the Creative Commons Attribution 4.0 International License (CC BY 4.0).

---

okay so that's the whole page, bestie — she ate and left no crumbs 🍓. This masterpiece is brought to you by tpm2-tools, dated APRIL 2019, and honestly? Iconic behavior. mwah 💋✨