tpm_changeownerauth(8)

💅 tpm_changeownerauth — the TPM Management glow-up page

okay bestie, welcome to tpm_changeownerauth from section 8 of the System Manager's Manual ✨ this is the TPM Management corner of the universe and we are about to change some passwords, no cap 🎀

🌸 NAME 🌸

tpm_changeownerauth — change the authorization data associated with the owner or SRK 🫶

✨ SYNOPSIS ✨

tpm_changeownerauth [OPTION]

💖 DESCRIPTION 💖

so tpm_changeownerauth lets you change the authorization data for the TPM owner, or for the TPM's Storage Root Key — and it does this via the TPM_ChangeAuthOwner API, iykyk 🔥

the way this works is it prompts you for the current password, then the new password, then a confirmation of the new password. three lil moments, one after another 💅

• --owner changes the TPM owner password 👑
• --srk changes the TPM's SRK password 🦋
• --well-known is the one you reach for when SRK or owner passwords need to be changed and the current owner password is a secret of zeros
• --set-well-known changes the current password to a secret of zeros

⚠️ lowkey important: both --well-known and --set-well-known do not work by themselves. they must be used with --owner and --srk options to indicate which of these passwords will be changed. periodt.

🎀 the options, one by one 🎀

• -h, --help — Display command usage info. (your little "what does this do again" bestie 🙈)
• -v, --version — Display command version info. ⭐
• -l, --log [none|error|info|debug] — Set logging level. pick your vibe: none, error, info, or debug 🌈
• -u, --unicode — Use TSS UNICODE encoding for passwords to comply with applications using TSS popup boxes 💜
• -o, --owner — Change the authorization data for the TPM owner. 👑
• -s, --srk — Change the authorization data for the TPM's Storage Root Key. 🦋
• -g, --original_password_unicode — Use TSS UNICODE encoding for original password to comply with applications using TSS popup boxes ✨
• -n, --new_password_unicode — Use TSS UNICODE encoding for new password to comply with applications using TSS popup boxes 🌸
• -z, --well-known — Change password to a new one when current owner password is a secret of all zeros (20 bytes of zeros). It must be specified which password (owner, SRK or both) to change 🫶
• -r, --set-well-known — Change password to a secret of all zeros (20 bytes of zeros). It must be specified which password (owner, SRK or both) to change 💀

🌈 SEE ALSO 🌈

• tpm_version(1)
• tpm_takeownership(8)
• tcsd(8)

🐛 REPORTING BUGS 🐛

found a bug? not the main character moment we wanted 😭 report bugs to <trousers-users@lists.sourceforge.net> and the devs will handle it, fr fr 💖

and that's the whole page, bestie!! this was TPM Management, dated 2005-05-06, serving you tpm_changeownerauth(8) realness — go forth and change those passwords responsibly, mwah 💅✨🎀