tpm_getpubek(8)

💖 tpm_getpubek 💖

okay bestie, welcome to the tpm_getpubek page from the System Manager's Manual — yes it lives in section 8, the big-girl system administration section, we love that for it 🫶

✨ NAME ✨

tpm_getpubek — display the public portion of the TPM's Endorsement Key

🌸 SYNOPSIS 🌸

tpm_getpubek [OPTION]

like. that's it. one command, a pile of options, main character energy 👑

🦋 DESCRIPTION 🦋

so tpm_getpubek goes and asks the TPM for the public portion of the Endorsement Key — and it does that via the TPM_ReadPubek API, no cap. 🎀

here's the lil plot twist tho: this operation can be restricted so it requires owner authorization. if that's the case, the command will hit you with a prompt for the owner password and then request the data. and when the call goes through successfully? the key information gets output. slay. ✨

💅 OPTIONS 💅

• -h, --help — shows you the command usage info, for when you're like "wait what does this do again" 🙈
• -v, --version — shows you the command version info 📌
• -l, --log [none|error|info|debug] — sets the logging level, pick your vibe from none, error, info, or debug 🔥
• -u, --unicode — use TSS UNICODE encoding for passwords, so you play nice with applications that use TSS popup boxes 🧚
• -z, --well-known — authenticate using 20 bytes of zeros as the owner password (that's the default TSS Well Known Secret), instead of prompting you for an owner password. convenient? yes. but like, that's literally zeros, iykyk 💀

🌈 SEE ALSO 🌈

• tpm_version(1)
• tpm_takeownership(8)
• tpm_restrictpubek(8)
• tpm_createek(8)
• tcsd(8)

the whole friend group fr fr 💜

🍓 REPORTING BUGS 🍓

found a bug? don't be shy, report it to <trousers-users@lists.sourceforge.net> — they wanna hear from you 🫶

and that's the whole page bestie, every option, every path, every byte of zeros, all of it preserved, nothing skipped, periodt 💅

this iconic little writeup is brought to you by TPM Management, dated 2005-05-05, and it's page tpm_getpubek(8) — stay encrypted, stay cute 🌸✨