tss2_quote(1)

✨ tss2_quote(1) ✨

okay so this is the tss2_quote(1) page from the General Commands Manual, and we’re gonna get you comfy with it because the vibes are immaculate and the TPM lore is real 💖

---

🩷 NAME 🩷

tss2_quote(1) - slay, that’s the name line, and yes the dash is part of the moment 💅

🌸 SYNOPSIS 🌸

tss2_quote [OPTIONS]

this synopsis ate and left no crumbs — [OPTIONS] is literally the whole vibe, no cap ✨

🦋 SEE ALSO 🦋

• fapi-config(5) — to adjust Fapi parameters like the used cryptographic profile and TCTI or directories for the Fapi metadata storages. obsessed with the config lore 💖
• fapi-profile(5) — to determine the cryptographic algorithms and parameters for all keys and operations of a specific TPM interaction like the name hash algorithm, the asymmetric signature algorithm, scheme and parameters and PCR bank selection. iykyk, this is the profile blueprint 🌈

💜 DESCRIPTION 💜

tss2_quote(1) - This command performs an attestation using the TPM. The PCR bank for each provided PCR index and signing scheme are set in the cryptographic profile (cf., fapi-profile(5)). the TPM has main character energy here, no cap 🔥

✨ OPTIONS ✨

These are the available options, bestie — it’s giving “pick your fave flags” 💅

• -x, --pcrList=STRING — An array holding the PCR indices to quote against. the way that STRING just carries the PCR indices is so real 🎀
• -Q, --qualifyingData=FILENAME or - (for stdin) — A nonce provided by the caller to ensure freshness of the signature. Optional parameter. lowkey the freshness check, and - means stdin 🍓
• -l, --pcrLog=FILENAME or - (for stdout) — Returns the PCR log for the chosen PCR. Optional parameter. and - means stdout 💖

PCR event logs are a list (arbitrary length JSON array) of log entries with the following content, not me being obsessed with structured log entries:

• recnum: Unique record number
• pcr: PCR index
• digest: The digests
• type: The type of event. At the moment the only possible value is: "LINUX_IMA" (legacy IMA)
• eventDigest: Digest of the event; e.g. the digest of the measured file
• eventName: Name of the event; e.g. the name of the measured file.

• -f, --force — Force overwriting the output file. highkey careful with this one, bestie — it really will overwrite 💀
• -p, --keyPath=STRING — Identifies the signing key. literally the signing key’s address, periodt 🔑
• -q, --quoteInfo=FILENAME or - (for stdout) — Returns a JSON-encoded structure holding the inputs to the quote operation. This includes the digest value and PCR values. - means stdout 🌸
• -o, --signature=FILENAME or - (for stdout) — Returns the signature over the quoted material. the signature slay 💅 - means stdout ✨
• -c, --certificate=FILENAME or - (for stdout) — The certificate associated with keyPath in PEM format. Optional parameter. - means stdout 🎀

🌈 COMMON OPTIONS 🌈

This collection of options are common to all tss2 programs and provide information that many users may expect. vibe check: these are the communal besties of the tss2 world 🫶

• -h, --help [man|no-man] — Display the tool’s manpage. By default, it attempts to invoke the manpager for the tool, however, on failure will output a short tool summary. This is the same behavior if the man option argument is specified, however if explicit man is requested, the tool will provide errors from man on stderr. If the no-man option is specified, or the manpager fails, the short options will be output to stdout. To successfully use the manpages feature requires the manpages to be installed or on MANPATH, See man(1) for more details. iykyk 📖
• -v, --version — Display version information for this tool, supported tctis and exit. quick little version vibe check and then bye 👋

⭐ EXAMPLE ⭐

this example is iconic, fr fr — copy it exactly and let it cook 🍳

tss2_quote --keyPath=HS/SRK/quotekey --pcrList="10,16" --qualifyingData=qualifyingData.file --signature=signature.file --pcrLog=pcrLog.file --certificate=certificate.file --quoteInfo=quoteInfo.info

🎀 RETURNS 🎀

0 on success or 1 on failure. fr fr, that’s the whole return vibe — success is 0, failure is 1, periodt 💖

💀 BUGS 💀

Github Issues. ngl, if something’s cursed, that’s where the bug lore lives 🐛

🫶 HELP 🫶

See the Mailing List. the mailing list is there for you, bestie 💌

📜 License 📜

This work is licensed under the Creative Commons Attribution 4.0 International License (CC BY 4.0). legal slay, we love a permissive license moment ✨

---

okay that’s the whole manual, bestie 💖 — source/version: tpm2-tools; date: APRIL 2019; page: tss2_quote(1). mwah 💋