GETSESSIONAUDITDIGEST(1)

🎀 NAME 🎀

getsessionauditdigest — bestie, it runs TPM2_GetSessionAuditDigest. That's it, that's the whole job, and honestly? She's an icon for not overexplaining 💅

It lives in section 1 of the User Commands manual, so you already know it's a program you run in your shell, not some dusty kernel thing ✨

---

💖 DESCRIPTION 💖

okay so before we even get to the actual command, the page hits you with this:

--version-string=v1045 is not a valid option

not me getting read for filth by a manpage 😭 noted, moving on 🫶

Then she introduces herself:

getsessionauditdigest

Runs TPM2_GetSessionAuditDigest

       [-pwde endorsement hierarchy password (default empty)] -hk
       signing key handle [-pwdk password for key (default empty)] -hs
       audit session handle [-halg (sha1, sha256, sha384) (default
       sha256)] [-qd qualifying data file name] [-os signature file name
       (default do not save)] [-oa attestation output file name (default
       do not save)] [-od session digest file name (default do not
       save)]

-se[0-2] session handle / attributes (default PWAP)

       01 continue

🦋 the flags, one by one 🦋

• -pwde — the endorsement hierarchy password. Default is empty, so if you've got one set, speak now or forever hold your peace 🙈
• -hk — signing key handle. This one is not optional, no default, you have to give it to her. main character energy, no notes 👑
• -pwdk — password for that key. Default is empty too ✨
• -hs — audit session handle. Also required, she's not gonna guess 🔥
• -halg — the hash algorithm, and your choices are sha1, sha256, or sha384. Default is sha256 💜
• -qd — qualifying data file name 🌸
• -os — signature file name. Default: do not save 💀
• -oa — attestation output file name. Default: do not save 💀
• -od — session digest file name. Default: do not save 💀

and then the session situation:

• -se[0-2] — session handle / attributes, default is PWAP
  • 01 continue

---

okay and then, and I cannot stress this enough, the page does it all over again. Like, the whole thing. Here's the second round, verbatim, because she said what she said 🎀

--version is not a valid option

getsessionauditdigest

Runs TPM2_GetSessionAuditDigest

       [-pwde endorsement hierarchy password (default empty)] -hk
       signing key handle [-pwdk password for key (default empty)] -hs
       audit session handle [-halg (sha1, sha256, sha384) (default
       sha256)] [-qd qualifying data file name] [-os signature file name
       (default do not save)] [-oa attestation output file name (default
       do not save)] [-od session digest file name (default do not
       save)]

-se[0-2] session handle / attributes (default PWAP)

       01 continue

same flags, same defaults, same -se[0-2] with its 01 continue. she's consistent, we love a queen who repeats herself for the people in the back 🫶

---

🌈 SEE ALSO 🌈

The full documentation for getsessionauditdigest is maintained as a Texinfo manual. If the info and getsessionauditdigest programs are properly installed at your site, then this:

info getsessionauditdigest

should give you access to the complete manual. go get your full lore, bestie 📖✨

---

and that's the whole page, xoxo 💖 it's getsessionauditdigest from the User Commands manual, dated July 2017, and she ate and left absolutely no crumbs 🎀🦋⭐