TPM_MKAIK(8)

📦 version 1.0.4, in debian bookworm, debian trixie, nixos 26.05, nixpkgs unstable, ubuntu jammy, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking

💖 tpm_mkaik — make a TPM Attestation Identity Key 💖

okay bestie, welcome to tpm_mkaik from the MAKE TPM AIK manual (section 8, system administration girlies rise up 🫶). this is the little program that ✨generates✨ you a TPM Attestation Identity Key, and no cap, it's giving main character energy for your whole attestation setup.

🌸 SYNOPSIS 🌸

tpm_mkaik [-zuhv] BLOB-FILE PUBKEY-FILE

two file arguments, four lil flags, that's the whole vibe check 💅

🦋 DESCRIPTION 🦋

so here's the tea ☕: the program generates a TPM Attestation Identity Key and stores it in the file BLOB-FILE. the public key gets stored in the file PUBKEY-FILE. and the public key? it's DER encoded, periodt. 🎀

  • -z — use the well known secret as the owner secret. (iykyk 👑)
  • -u — use TSS UNICODE encoding for passwords. 🌈
  • -h — display command usage info. (help me help you bestie 💖)
  • -v — display command version info. ⭐

💀 BUGS 💀

not me having to tell you this but 😭 — sometimes, when tpm_mkaik is invoked without the -z option, no password prompt appears. like, it just... doesn't show up. awkward. 🙈

the work around, bestie, is a whole three-step ritual: use tpm_changeownerauth to set the secret to the well known one, generate the key, and then use tpm_changeownerauth again to set the secret to its original value. slay, but make it a detour. 💅

👑 SEE ALSO 👑

that's the whole page, bestie — this one's from Oct 2010, out of the MAKE TPM AIK(8) manual, and yeah she's an elder but she still ate. 🍓 go make some keys, you got this fr fr 💜🧚

📦 where this page comes from