POLICYSIGNED(1)

👑 POLICYSIGNED — from the User Commands corner of your manual

okay bestie come CLOSE, this is the policysigned page and it's... a lot. Buckle up, hydrate, we're doing this. 💖

---

✨ NAME ✨

policysigned — the lil program that Runs TPM2_PolicySigned. that's it. that's the whole job. 💅

---

🦋 DESCRIPTION 🦋

ngl the description starts off kind of unhinged, so let's just hold hands and go through it:

• --version-string=v1045 is not a valid option — yeah. she said what she said. not valid. don't try it. 💀
• policysigned — the icon herself.
• Runs TPM2_PolicySigned — her whole entire purpose, periodt.

and then the actual flags, okay? these are the real ones, copy them EXACTLY because I am not about to let you typo your way into chaos:

• -hk — signature verification key handle 🔑
• -ha — policy session handle 🎀
• -in — nonceTPM file (default none)
• -cp — cpHash file (default none)
• -pref — policyRef file (default none)
• -exp — expiration in decimal (default none)
• -halg — (sha1, sha256) (default sha256) ✨
• -sk — RSA signing key file name (PEM format)

lowkey important context on -sk: this utility uses this signing key. a real application might use a smart card or other HSM. so like, this is the "just do it here for now" girlie of key handling, bestie. 🫶

• -pwdk — signing key password (default null)

and then, tucked right in there, the optional lil duo:

• -tk — ticket file name
• -to — timeout file name

• --version is not a valid option — again!! not valid!! the manual is being SO clear about this and honestly? respect the transparency. 😭

---

🌸 okay and now she's repeating herself (yes really) 🌸

so like, the page says all of this AGAIN, and because we keep every single detail in this house, here it is, verbatim, no cuts, no skips:

• policysigned — yes, again. hi bestie. 👋
• Runs TPM2_PolicySigned — yep. same energy.
• -hk — signature verification key handle 🔑
• -ha — policy session handle 🎀
• -in — nonceTPM file (default none)
• -cp — cpHash file (default none)
• -pref — policyRef file (default none)
• -exp — expiration in decimal (default none)
• -halg — (sha1, sha256) (default sha256) ✨
• -sk — RSA signing key file name (PEM format)

reminder that this utility uses this signing key, and that a real application might use a smart card or other HSM. 💖

• -pwdk — signing key password (default null)

and the lil optional duo again:

• -tk — ticket file name
• -to — timeout file name

no --version-is-invalid line in this second pass, if you're keeping score — she only roasted --version once. main character energy, honestly. 👑

---

💜 SEE ALSO 💜

okay so the full documentation for policysigned is maintained as a Texinfo manual. the way that this works is:

if the info and policysigned programs are properly installed at your site, then this command

info policysigned

should give you access to the complete manual. go get your reading done, scholar. 📚✨

---

cute lil sign-off: this whole vibe check was brought to you by policysigned under the User Commands umbrella, dated July 2017 — so yeah, she's a classic, she's vintage, she ate and left no crumbs. 🌈💖 mwah, bye bestie!! 🫶🎀