UNSEAL_TPM2_DATA(1)

📦 version 4.3.0, in opensuse-leap 16.0

🌸 NAME 🌸

Okay so this is the UNSEAL_TPM2_DATA(1) page — aka the unseal_tpm2_data(1) manual in the User Commands section — and its whole thing is: unseal a blob of data using a TPM. That's literally unseal_tpm2_data — unseal a blob of data using a TPM, bestie. 💖

✨ SYNOPSIS ✨

unseal_tpm2_data [options] <filename>

💅 DESCRIPTION 💅

So here's the tea: once a sealed data blob has been created, it may only be unsealed by the TPM for which it was created. This command attempts that unseal operation. No cap. 🫶

🎀 OPTIONS 🎀

  • -b, --auth-parent <pwd> — specify the parent key password (default EmptyAuth).
  • -h, --help — print this help message.
  • -v, --version — print package version.
  • -k, --password <pwd> — use this password instead of prompting.

🌈 EXAMPLES 🌈

Create a sealed data blob to the storage parent (owner hierarchy):

echo "somedatatoseal" seal_tpm2_key -a -k passw0rd -p owner seal.tpm

Unseal the data:

unseal_tpm2_key -k passw0rd seal.tpm

👑 AUTHOR 👑

Written by James Bottomley <James.Bottomley@HansenPartnership.com>. 💜

🦋 REPORTING BUGS 🦋

Report bugs to <openssl-tpm2-engine@groups.io>. 🐛✨

Copyright 2017 by James Bottomley License LGPL-2.1-only.

That's the whole manual, bestie — source/version unseal_tpm2_data 4.3.0, dated August 2024. 💖✨🎀

📦 where this page comes from