tpm_createek(8)

🌸 tpm_createek — from the tpm_createek(8) page, System Manager's Manual energy ✨

okay bestie, sit down, we're doing TPM stuff and honestly? it's giving "one-time setup ritual" and I'm obsessed 🫶

💖 NAME

tpm_createek — make an Endorsement Key Pair on the TPM. yes, the whole point. main character behavior only 💅

🦋 SYNOPSIS

tpm_createek [OPTION]

✨ DESCRIPTION

So here's the tea: tpm_createek creates an Endorsement Key Pair on the TPM — and it does it through the TPM_CreateEndorsementKeyPair API, no cap. 🎀

Lowkey you should almost never need this, because the Endorsement Key is normally already installed as part of manufacturing. Like, it comes pre-loaded, the factory did that, periodt. But — and this is the important bit — you might need to run this command once if commands like tpm_getpubek are returning error code 35 from the TPM layer. so if you're seeing 35, this is your girl 💜

Here's your general option lineup:

• -h, --help — show me the usage info, bestie, tell me what I'm doing 🙈
• -v, --version — display the command version info ⭐
• -l, --log [none|error|info|debug] — set the logging level. pick your vibe: none, error, info, or debug 🌈

🔥 OPTIONS VALID ONLY FOR TPM VERSION 1.2

heads up bestie, everything in this section is specifically for TPM version 1.2. not 2.0. we're being vintage here 👑

• -r, --revocable — creates a revocable key pair instead of a non-revocable one. ⚠️ requires secret data, so you need either -g -o or -i — see below, don't skip that part fr fr
• -i, --infile [input file] — names the file holding the secret data that gets used as revoke data for the new revocable EK pair. careful though: only the first 20 bytes of this file are used and the remaining ones are ignored 💀 like the rest of the file is just... there
• -g, --generate-secret — generates a random 20 bytes value that becomes the EK pair's revocable secret data. requires -o (see below) 🧚
• -o, --outfile [output file] — names the file where the generated revocable secret data gets written, so you can actually use it later 💾

👑 SEE ALSO

tpm_version(1), tpm_getpubek(8), tcsd(8) — go read these too, they're iconic 🦋

🐛 REPORTING BUGS

found a bug? report it to <trousers-users@lists.sourceforge.net> — they want to hear from you, fr fr 🫶

and that's the whole page, bestie!! TPM Management, 2005-05-05 — yeah this page is old enough to have its own driver's license but it still ate 💅 go create that Endorsement Key Pair, you got this 🌸✨