TPM2-ABRMD(8)

💻 TPM2-ABRMD(8) — the tpm2-abrmd girlie manual 💅

okay so bestie, welcome to the tpm2-abrmd page ✨ this is from the TPM2 Software Stack and honestly it's giving main character energy for your TPM setup 🎀

---

🌸 NAME 🌸

tpm2-abrmd — the TPM2 access broker and resource management daemon, no cap 💖

---

✨ SYNOPSIS ✨

tpm2-abrmd [-m][-e][-i][-o][-l logger-
name][-r][-s][-g /dev/urandom][-t conf]

---

🦋 DESCRIPTION 🦋

so tpm2-abrmd is literally this daemon that implements the TPM access broker and resource manager exactly as described by the Trusted Computing Group (TGC) in the “TSS System Level API and TPM Command Transmission Interface Specification” 👑 she's iconic for that.

this daemon uses the DBus system bus and some pipes to communicate with clients — iykyk 💅

---

💖 OPTIONS 💖

• -t, --tcti — give the daemon a string that describes the TCTI and how to configure it for communication with the next component down the TSS2 stack 🫶 this string is formatted as "tcti-name:tcti-conf" where:
  • 'tcti-name' — the name of the TCTI library shared object file. libraries are found using the same algorithm as dlopen (3). if the TCTI library file name follows the naming convention libtss2-tcti-<name>.so.0 where <name> is the name for the TCTI, the value of <name> may be supplied in place of the full library file name. see 'EXAMPLES' below 👇
  • 'tcti-conf' — the configuration string passed to the TCTI library upon initialization.

if this option is omitted (or a NULL string provided) then a default TCTI is used in it's default configuration. if the string does not contain a colon then it will be interpreted as only the 'tcti-name'. to provide only the configuration string (using the default TCTI) then the first character in the string passed to this option must be a colon followed by the configuration string. see examples below 🎀

• -o, --allow-root — allow daemon to run as root. if this option is not provided the daemon will refused to run as the root user. use of this option is not recommended 🙈
• -m, --max-connections — set an upper bound on the number of concurrent client connections allowed. once this number of client connections is reached new connections will be rejected with an error. if the option is not specified the default is 27 ⭐
• -f, --flush-all — flush all objects and sessions when daemon is started ✨
• -l, --logger — direct logging output to named logging target. supported targets are stdout and syslog. if the logger option is not specified the default is stdout 💜
• -e, --max-sessions — set and upper bound on the number of sessions that each client connection is allowed to create (loaded or active) at any one time. if the option is not specified the default is 4 🌸
• -r, --max-transients — set an upper bound on the number of transient objects that each client connection allowed to load. once this number of objects is reached attempts to load new transient objects will produce an error. if the option is not specified the default is 27 🔥
• -n, --dbus-name — claim the given name on dbus. this option overrides the default of com.intel.tss2.Tabrmd 👑
• -g, --prng-seed-file — read seed for pseudo-random number generator from the provided file 🌈
• -s, --session — connect daemon to the session dbus. if the option is not specified the daemon connects to the system dbus 💫
• -v, --version — display version string 🎀

---

🌟 EXAMPLES 🌟

execute daemon with default TCTI and options:

tpm2-abrmd

execute daemon with default TCTI and provided config string:

tpm2-abrmd --tcti=":/dev/tpm0"

this is equivalent to:

tpm2-abrmd --tcti="device:/dev/tpm0"
tpm2-abrmd --tcti="libtss2-tcti-device.so.0:/dev/tpm0"

have daemon use swtpm TPM2 Simulator tcti library — this connects to a TPM2 simulator via a TCP swtpm 🦋

tpm2-abrmd --tcti="swtpm"
tpm2-abrmd --tcti="libtss2-tcti-swtpm.so.0"

have daemon use tcti library 'libtss2-tcti-swtpm.so.0' and config string:

tpm2-abrmd --tcti=swtpm:host=127.0.0.1,port=5555"
tpm2-abrmd --tcti="libtss2-tcti-swtpm.so.0:host=127.0.0.1,port=5555"

---

🫶 AUTHOR 🫶

Philip Tricca <philip.b.tricca@intel.com> — ty for your service king 👑

---

🧚 SEE ALSO 🧚

tcsd(8) — go check it out bestie 💜

---

💀 COLOPHON 💀

this page is part of the 3.0.0 release of Intel's TPM2 Access Broker & Resource Management Daemon. a description of the project, information about reporting bugs, and the latest version of this page can be found at https://github.com/01org/tpm2-abrmd/ 🌈

---

Intel · March 2018 · TPM2-ABRMD(8)

okay that's the whole page bestie, you're literally gonna slay your TPM setup now, periodt 💅✨🍓