SETPRIMARYPOLICY(1)

✨ NAME ✨

okay so bestie, meet setprimarypolicy — it's a User Commands girly (that's section 1 of the manual, iykyk 💅) and what it does is literally:

Runs TPM2_SetPrimarypolicy 🎀

that's the whole name line, no cap. she's an icon, she's a legend, and she runs exactly one thing.

---

🦋 DESCRIPTION 🦋

okay so first thing the page tells you, and I quote:

--version-string=v1045 is not a valid option

not a vibe check, just a straight-up "no ❌". noted. moving on.

setprimarypolicy

Runs TPM2_SetPrimaryPolicy 👑

[-hi authhandle hierarchy (l, e, o, p) (default platform)] [-pwda authorization password (default empty)] [-pol policy file (default empty policy)] [-halg (sha1, sha256) (default null)]

so let's break down those flags like the main characters they are 🌟

• -hi — the authhandle hierarchy. your choices are l, e, o, p. the default? platform 💜
• -pwda — the authorization password. default is empty (she's lowkey mysterious, she says nothing 🤫)
• -pol — the policy file. default is empty policy 🍓
• -halg — the hash algorithm, and the options are sha1, sha256. default is null ✨

and then there's the session situation:

• -se[0-2] — session handle / attributes, default PWAP 🫶

and the attribute values you can slot in are:

• 01 continue
• 20 command decrypt
• 40 response encrypt

no notes, that's just what it says 💀

---

okay and then — and I need you to sit down for this — the page does it again. yes really. the exact same bit, twice. we don't make the rules, we just report them 🌈

so, one more time, fr fr:

--version is not a valid option

🚫 not valid. love that for us.

setprimarypolicy

Runs TPM2_SetPrimaryPolicy 👑

[-hi authhandle hierarchy (l, e, o, p) (default platform)] [-pwda authorization password (default empty)] [-pol policy file (default empty policy)] [-halg (sha1, sha256) (default null)]

• -hi — authhandle hierarchy, options l, e, o, p, default platform 💖
• -pwda — authorization password, default empty
• -pol — policy file, default empty policy
• -halg — sha1, sha256, default null ⭐
• -se[0-2] — session handle / attributes, default PWAP 🧚
  • 01 continue
  • 20 command decrypt
  • 40 response encrypt

periodt. that's the description. both of them. 😭

---

🌈 SEE ALSO 🌈

okay so if you want the full tea, the complete documentation for setprimarypolicy is maintained as a Texinfo manual 📖✨. and if the info and setprimarypolicy programs are properly installed at your site, then this:

info setprimarypolicy

should give you access to the complete manual 🫶 go get your info bestie, she has everything.

---

and that's the whole page, babe 💅 this is setprimarypolicy, out of the SETPRIMARYPOLICY(1) manual, dated July 2017 — yeah she's a lil vintage, but vintage is iconic 🎀 bye bye, go run your TPM stuff 👑