NVCERTIFY(1)

💖 NVCERTIFY(1) 💖

okay bestie, welcome to the nvcertify page, a User Commands moment, and it's giving very mysterious because honestly? this page is a little cursed. but we're gonna get through it together, hand in hand 🫶

---

✨ NAME ✨

nvcertify — literally just runs TPM2_NV_Certify. that's the whole job. no cap 💅

---

🌸 DESCRIPTION 🌸

okay so first thing, and I need you to sit down for this one: --version-string=v1045 is not a valid option. not me finding out the hard way 😭 that's just what it says, bestie. moving on.

nvcertify

Runs TPM2_NV_Certify

• -ha NV index handle

then, in square brackets because they're optional, we got: [-pwdn password for NV index (default empty)] — that's the password for the NV index, default is empty, slay.

-hk certifying key handle — the certifying key handle, and this one is required, no bracket, no escape 💅

[-pwdk password for key (default empty)] — password for the key, default empty.

[-halg (sha1, sha256, sha384) (default sha256)] — the hash algorithm, your choices are sha1, sha256, sha384, and the default is sha256 ✨

[-salg signature algorithm (rsa, ecc) (default rsa)] — signature algorithm, pick rsa or ecc, default is rsa 🔥

-sz data size — required, that's the data size, no default for you.

[-off offset (default 0)] — offset, defaults to 0.

[-os signature file name (default do not save)] — signature file name, and by default it does not save, so if you want it you gotta ask for it.

[-oa attestation output file name (default do not save)] — attestation output file name, also defaults to not saving. iconic behaviour honestly.

• -se[0-2] session handle / attributes (default PWAP)

01 continue

ok so -se takes 0 through 2 for the session handle and attributes, default is PWAP, and 01 continue means... continue. that's what it says. 🦋

---

🙈 the part where it says it all over again 🙈

and THEN, and I cannot make this up, the page hits us with:

--version is not a valid option

genuinely the most ominous energy on this entire man page 💀

nvcertify

Runs TPM2_NV_Certify

• -ha NV index handle

[-pwdn password for NV index (default empty)] — password for the NV index, default empty.

-hk certifying key handle — required certifying key handle.

[-pwdk password for key (default empty)] — password for the key, default empty.

[-halg (sha1, sha256, sha384) (default sha256)] — hash algorithm, sha1, sha256 or sha384, default sha256.

[-salg signature algorithm (rsa, ecc) (default rsa)] — signature algorithm, rsa or ecc, default rsa.

-sz data size — data size, required.

[-off offset (default 0)] — offset, default 0.

[-os signature file name (default do not save)] — signature file name, default do not save.

[-oa attestation output file name (default do not save)] — attestation output file name, default do not save.

• -se[0-2] session handle / attributes (default PWAP)

01 continue

---

👑 SEE ALSO 👑

The full documentation for nvcertify is maintained as a Texinfo manual. If the info and nvcertify programs are properly installed at your site, the command

info nvcertify

should give you access to the complete manual.

fr fr bestie, go read the Texinfo manual, that's where the full lore lives 🌈

---

and that's the whole page!! written up by nvcertify back in July 2017, version vibes from the nvcertify source, living its NVCERTIFY(1) life in User Commands. mwah, go certify something, you ate 💅💖✨