HIERARCHYCHANGEAUTH(1)

✨ NAME ✨

okay so bestie, welcome to hierarchychangeauth — the little user command that runs TPM2_HierarchyChangeAuth 💅 that's the whole vibe, that's the whole name, periodt.

---

🌸 DESCRIPTION 🌸

first things first, no cap: --version-string=v1045 is not a valid option 💀 like, it's just not, don't try it.

hierarchychangeauth

runs TPM2_HierarchyChangeAuth ✨

now the options, and yes we're listing every single one because we don't skip:

• -hi hierarchy (l, e, o, p) — which hierarchy we're messing with, and the mapping is iconic:
  • l = lockout
  • e = endorsement
  • o = owner
  • p = platform
• -pwdn new authorization password (default empty) — the fresh new password, and yeah the default is just empty 🫶
• -pwdni new authorization password file name (default empty) — same thing but you're handing over a file name instead, default empty too
• -pwda authorization password (default empty) — the current auth password, default empty bestie
• -pwdai authorization password file name (default empty) — the current auth password, but from a file name, default empty
• -se[0-2] session handle / attributes (default PWAP) — session stuff, and the attribute bits are:
  • 01 = continue
  • 20 = command decrypt
  • 40 = response encrypt

---

okay and now, because the page said it twice, we're saying it twice, and honestly the double drop is kind of a serve 😭 --version is not a valid option.

hierarchychangeauth

runs TPM2_HierarchyChangeAuth ✨

• -hi hierarchy (l, e, o, p) — the hierarchy picker, one more time:
  • l = lockout
  • e = endorsement
  • o = owner
  • p = platform
• -pwdn new authorization password (default empty) — new auth password, default empty
• -pwdni new authorization password file name (default empty) — new auth password file name, default empty
• -pwda authorization password (default empty) — current auth password, default empty
• -pwdai authorization password file name (default empty) — current auth password file name, default empty
• -se[0-2] session handle / attributes (default PWAP) — the session bits, again, still iconic:
  • 01 = continue
  • 20 = command decrypt
  • 40 = response encrypt

---

🦋 SEE ALSO 🦋

the full documentation for hierarchychangeauth is maintained as a Texinfo manual 📖 and if the info and hierarchychangeauth programs are properly installed at your site, then this command right here

info hierarchychangeauth

should give you access to the complete manual 🫶 iykyk.

---

and that's the whole page bestie!! 🎀 this was hierarchychangeauth from the User Commands section, July 2017 era, no cap. slay, go change those hierarchy auths responsibly 💖✨