CERTIFYCREATION(1)

💖 CERTIFYCREATION(1) — like, the manual page, but make it make sense 💖

okay bestie, welcome to certifycreation, a User Command. this whole thing lives under the manual name certifycreation, and honestly? she's a lil chaotic but we love her. grab a boba, we're doing this together. 🧋✨

---

🌸 NAME 🌸

certifycreation — she runs TPM2_CertifyCreation. that's the whole vibe. no cap. 💅

---

✨ DESCRIPTION ✨

okay so first thing's first, and this is important, bestie:

--version-string=v1045 is not a valid option. not valid. not it. 🚫

then we get:

certify

Runs TPM2_CertifyCreation 💫

here's the actual lineup of what she takes, and yes, every single one matters:

• -ho — object handle 👑
• -hk — certifying key handle 🔑

and then the optional besties in brackets:

• [-pwdk password for key (default empty)] — password for the key, and if you don't hand one over, it's just empty, no biggie
• [-halg (sha1, sha256, sha384) (default sha256)] — pick your hash algo from sha1, sha256, or sha384; default is sha256 ⭐
• [-salg signature algorithm (rsa, ecc) (default rsa)] — signature algorithm, either rsa or ecc, default rsa
• [-qd qualifying data file name] — the qualifying data file name
• -tk input ticket file name — input ticket file name (this one's not optional, she NEEDS it)
• -ch input creation hash file name — input creation hash file name (also required, periodt)
• [-os signature file name] (default do not save) — signature file name, but default is do not save 🙈
• [-oa attestation output file name (default do not save)] — attestation output file name, default is also do not save 🙈

then:

• -se[0-2] — session handle / attributes (default PWAP)
  • 01 continue

and THEN, because the universe has a sense of humor, we get this again:

--version is not a valid option. nope. not valid. 💀

certify

Runs TPM2_CertifyCreation 🔥

• -ho — object handle 👑
• -hk — certifying key handle 🔑

optionals, take two, same energy:

• [-pwdk password for key (default empty)] — password for the key, default empty
• [-halg (sha1, sha256, sha384) (default sha256)] — hash algorithm, sha1 / sha256 / sha384, default sha256
• [-salg signature algorithm (rsa, ecc) (default rsa)] — signature algorithm, rsa / ecc, default rsa
• [-qd qualifying data file name] — qualifying data file name
• -tk input ticket file name — input ticket file name
• -ch input creation hash file name — input creation hash file name
• [-os signature file name] (default do not save) — signature file name, default do not save
• [-oa attestation output file name (default do not save)] — attestation output file name, default do not save

and again, one more time:

• -se[0-2] — session handle / attributes (default PWAP)
  • 01 continue

yeah. she said it twice. iconic behavior honestly. 💅✨

---

🦋 SEE ALSO 🦋

the full documentation for certifycreation is maintained as a Texinfo manual. if the info and certifycreation programs are properly installed at your site, the command

info certifycreation

should give you access to the complete manual. 📖🌸

---

and that's the whole page bestie, you ate that 🫶

certifycreation — July 2017 — CERTIFYCREATION(1) 💖 that's the sign-off, mwah, go certify some creations 👑✨🎀