POLICYSECRET(1)

💖 NAME 💖

policysecret — ok so bestie, this is the one that Runs TPM2_PolicySecret. That's it. That's the whole name. Short, sweet, iconic. ✨

---

🌸 DESCRIPTION 🌸

First things first, no cap, the manpage literally opens with this:

--version-string=v1045 is not a valid option

Like... okay girl we hear you 💀 that's just what it says, and I'm not gonna lie to you about it.

policysecret — it Runs TPM2_PolicySecret. 🫶

Here's the whole roster of what it takes, fr fr:

• -ha — authorizing entity handle
• -hs — policy session handle
• -in — nonceTPM file (default none)
• -cp — cpHash file (default none)
• -pref — policyRef file (default none)
• -exp — expiration (default none)
• -pwde — authorizing entity password (default empty)
  • [-tk ticket file name] [-to timeout file name] — written exactly like this in the source, brackets and all, no notes added 💅
• -se[0-2] — session handle / attributes (default PWAP)
  • 01 continue 20 command decrypt 40 response encrypt

And then — plot twist — it does the whole thing AGAIN. 😭 Same content, second verse, same as the first. Because the manpage said so and I am but a humble narrator:

--version is not a valid option

Yep. That's the line. It's giving "the docs are the docs" energy and honestly? Respect. 🎀

policysecret — Runs TPM2_PolicySecret. (Round two, bestie, same energy.)

• -ha — authorizing entity handle
• -hs — policy session handle
• -in — nonceTPM file (default none)
• -cp — cpHash file (default none)
• -pref — policyRef file (default none)
• -exp — expiration (default none)
• -pwde — authorizing entity password (default empty)
  • [-tk ticket file name] [-to timeout file name] — again, verbatim, brackets intact 🦋
• -se[0-2] — session handle / attributes (default PWAP)
  • 01 continue 20 command decrypt 40 response encrypt

Not me flagging this as a warning-aside: those two not a valid option lines are in here because they're in the original. I did not invent them, I did not "fix" them, and I will not be taking questions. 🙈

---

🌈 SEE ALSO 🌈

The full documentation for policysecret is maintained as a Texinfo manual. If the info and policysecret programs are properly installed at your site, this command:

info policysecret

should give you access to the complete manual. 👑

---

Ok that's the whole page, bestie!! 🫶 This was the policysecret page from July 2017, sitting in section 1 (User Commands), and its footer name is policysecret. Go forth and slay. 💖✨🎀