NVDEFINESPACE(1)

🌸 NVDEFINESPACE(1) 🌸

User Commands · nvdefinespace · the one and only 🎀

okay so bestie, we're doing a whole manual page today and it's giving chaos but I gotchu. it's nvdefinespace, it's a User Command, and we're gonna read it together, top to bottom, no skimming, no cap. 💅

---

✨ NAME ✨

nvdefinespace — Runs TPM2_NV_DefineSpace 🦋

---

💖 DESCRIPTION 💖

First things first, and I need you to hear me on this one:

--version-string=v1045 is not a valid option

Noted. Moving on, periodt.

nvdefinespace

Runs TPM2_NV_DefineSpace

Like. That's the whole vibe. It runs TPM2_NV_DefineSpace. Iconic. 🔥

Now the options, and there are a lot of them, so grab a snack 🍓:

• -ha — NV index handle. It looks like 01xxxxxx.
• -hi — authorizing hierarchy (o, p). o = owner, p = platform, and p sets PLATFORMCREATE.
  • [-pwdp password for hierarchy (default empty)]
  • [-hia hierarchy authorization (o, p) (default index authorization)]
  • default is AUTHWRITE, AUTHREAD; o sets OWNERWRITE, OWNERREAD; p sets PPWRITE, PPREAD (platform)
  • [-pwdn password for NV index (default empty)]
  • ssts AUTHWRITE (if not PIN index), AUTHREAD
  • [-nalg name algorithm (sha1, sha256, sha384) (default sha256)]
  • [-sz data size (default 0)] — ignored for other than ordinary index
  • [-ty index type (o, c, b, e, p, f) (default ordinary)] — ordinary, counter, bits, extend, pin pass, pin fail
  • [-pol policy file (default empty)] — sets POLICYWRITE, POLICYREAD
• +at — attributes to add (may be specified more than once):
  • ppw (PPWRITE)
  • ppr (PPREAD)
  • ow (OWNERWRITE)
  • or (OWNERREAD)
  • aw (AUTHWRITE)
  • ar (AUTHREAD)
  • wd (WRITEDEFINE)
  • gl (GLOBALLOCK)
  • rst (READ_STCLEAR)
  • wst (WRITE_STCLEAR)
  • wa (WRITEALL)
  • ody (ORDERLY)
  • pold (POLICY_DELETE)
  • stc (CLEAR_STCLEAR)
• -at — attributes to delete (may be specified more than once):
  • ppw (PPWRITE)
  • ppr (PPREAD)
  • ow (OWNERWRITE)
  • or (OWNERREAD)
  • aw (AUTHWRITE)
  • ar (AUTHREAD)
  • pw (POLICYWRITE)
  • pr (POLICYREAD)
  • da (NO_DA) (default set)
• -se[0-2] — session handle / attributes (default PWAP)
  • 01 continue

---

okay and then 💀 the page just… says it all again. like it looked at its own reflection and fell in love. main character energy fr. but I promised I'd keep every single detail, so here's round two, exactly as written:

--version is not a valid option

nvdefinespace

Runs TPM2_NV_DefineSpace

• -ha — NV index handle. It looks like 01xxxxxx.
• -hi — authorizing hierarchy (o, p). o = owner, p = platform, and p sets PLATFORMCREATE.
  • [-pwdp password for hierarchy (default empty)]
  • [-hia hierarchy authorization (o, p) (default index authorization)]
  • default is AUTHWRITE, AUTHREAD; o sets OWNERWRITE, OWNERREAD; p sets PPWRITE, PPREAD (platform)
  • [-pwdn password for NV index (default empty)]
  • ssts AUTHWRITE (if not PIN index), AUTHREAD
  • [-nalg name algorithm (sha1, sha256, sha384) (default sha256)]
  • [-sz data size (default 0)] — ignored for other than ordinary index
  • [-ty index type (o, c, b, e, p, f) (default ordinary)] — ordinary, counter, bits, extend, pin pass, pin fail
  • [-pol policy file (default empty)] — sets POLICYWRITE, POLICYREAD
• +at — attributes to add (may be specified more than once):
  • ppw (PPWRITE)
  • ppr (PPREAD)
  • ow (OWNERWRITE)
  • or (OWNERREAD)
  • aw (AUTHWRITE)
  • ar (AUTHREAD)
  • wd (WRITEDEFINE)
  • gl (GLOBALLOCK)
  • rst (READ_STCLEAR)
  • wst (WRITE_STCLEAR)
  • wa (WRITEALL)
  • ody (ORDERLY)
  • pold (POLICY_DELETE)
  • stc (CLEAR_STCLEAR)
• -at — attributes to delete (may be specified more than once):
  • ppw (PPWRITE)
  • ppr (PPREAD)
  • ow (OWNERWRITE)
  • or (OWNERREAD)
  • aw (AUTHWRITE)
  • ar (AUTHREAD)
  • pw (POLICYWRITE)
  • pr (POLICYREAD)
  • da (NO_DA) (default set)
• -se[0-2] — session handle / attributes (default PWAP)
  • 01 continue

---

🦋 SEE ALSO 🦋

The full documentation for nvdefinespace is maintained as a Texinfo manual. If the info and nvdefinespace programs are properly installed at your site, the command

info nvdefinespace

should give you access to the complete manual. 🌈

---

okay that's the whole page!! it's from July 2017, it's part of the nvdefinespace source, and it lives under the name NVDEFINESPACE(1). love that for it. mwah 💋 you read the whole thing, that's highkey iconic of you, bestie 🫶✨