GETCOMMANDAUDITDIGEST(1)

πŸ“¦
version 1045 Β· 3 versions
, in debian bookworm, ubuntu jammy, ubuntu noble, ubuntu questing

πŸ‘‘ GETCOMMANDAUDITDIGEST(1) β€” User Commands πŸ’…

okay bestie, welcome to GETCOMMANDAUDITDIGEST(1), a User Commands girlie from way back. she's a manual page, she's a little chaotic, and she's about to run a TPM thing. let's go πŸ¦‹


✨ NAME ✨

getcommandauditdigest β€” literally just Runs TPM2_GetCommandAuditDigest. that's the whole name, that's the whole vibe. no cap. πŸŽ€


🌸 DESCRIPTION 🌸

so first things first, the page hits you with this:

--version-string=v1045 is not a valid option

not me opening a manpage and getting roasted immediately 😭 okay. noted. moving on. πŸ’€

then it's the command itself:

getcommandauditdigest

which Runs TPM2_GetCommandAuditDigest. main character energy fr fr ✨

and here's her whole fit, options and all:

[-pwde endorsement hierarchy password (default empty)] -hk
signing key handle [-pwdk password for key (default empty)]
[-halg (sha1, sha256, sha384) (default sha256)] [-salg signature
algorithm (rsa, ecc) (default rsa)] [-qd qualifying data file
name] [-os signature file name (default do not save)] [-oa
attestation output file name (default do not save)]

okay now let's break each of these down one by one, because we do not skip πŸ’–

  • -pwde β€” endorsement hierarchy password. default is empty, so if you've got nothing to say, you can literally say nothing. lowkey freeing.
  • -hk β€” the signing key handle. yes this one's required, she's not optional, she's the moment πŸ‘‘
  • -pwdk β€” password for the key. default is empty again. two empty passwords and a dream.
  • -halg β€” the hash algorithm, and your choices are sha1, sha256, or sha384. default is sha256. she knows what she likes.
  • -salg β€” the signature algorithm, either rsa or ecc. default is rsa. pick your fighter πŸ’…
  • -qd β€” qualifying data file name. give her a file, she'll qualify the data, it's giving teamwork.
  • -os β€” signature file name. default is do not save, so if you don't say anything, the signature just... doesn't get saved. ghosted fr πŸ™ˆ
  • -oa β€” attestation output file name. default is also do not save. same energy, different file. 😭

and then there's this cutie:

  • -se[0-2] β€” session handle / attributes, default is PWAP. and the one attribute listed under her is:
    • 01 continue

slay. now here's the part where the manpage repeats her whole self, word for word, like she's checking her reflection in the mirror πŸͺž because the entire block above shows up AGAIN:

--version is not a valid option

okay so also not a valid option. two fake options, zero chill. πŸ’€

getcommandauditdigest

Runs TPM2_GetCommandAuditDigest

[-pwde endorsement hierarchy password (default empty)] -hk
signing key handle [-pwdk password for key (default empty)]
[-halg (sha1, sha256, sha384) (default sha256)] [-salg signature
algorithm (rsa, ecc) (default rsa)] [-qd qualifying data file
name] [-os signature file name (default do not save)] [-oa
attestation output file name (default do not save)]

and the sessions again:

  • -se[0-2] β€” session handle / attributes, default PWAP
    • 01 continue

yeah. she said it twice. we respect it. consistency queen. πŸŽ€βœ¨


πŸ¦‹ SEE ALSO πŸ¦‹

the full documentation for getcommandauditdigest is maintained as a Texinfo manual. so if the info program and the getcommandauditdigest program are both properly installed at your site, this command right here:

info getcommandauditdigest

should give you access to the complete manual. go get your lore bestie πŸ“šβœ¨


and that's the page!! written by the getcommandauditdigest girlies, dated July 2017, filed under GETCOMMANDAUDITDIGEST(1). she's been iconic since 2017 and she's not stopping πŸ’œπŸŒΈπŸ’…

πŸ“¦ where this page comes from