tpm_restrictpubek(8)
β¨ tpm_restrictpubek β¨</p> π
okay bestie, welcome to a page from the System Manager's Manual β yeah it's tpm_restrictpubek(8), a whole TPM Management situation, and honestly? it's giving gatekeeper energy. literally. let's go π
NAME
tpm_restrictpubek β bestie, this one restricts the ability to display the public portion of the Endorsement Key to the owner. that's it. that's the job. π
SYNOPSIS
tpm_restrictpubek [OPTION]
DESCRIPTION
so tpm_restrictpubek reports the status of who can display the public portion of the Endorsement Key. πΈ that's the default behavior, no cap β and you can also get it on purpose with the --status option.
this operation stays in effect until the owner is cleared, and it prompts for the owner password. π
with the --restrict option, the ability to display the public portion of the Endorsement Key is restricted to the owner β via the TPM_DisablePubekRead API, iykyk. the command prompts for the owner password to complete the operation. π
β οΈ heads up queen:--statusand--restrictare mutually exclusive, and the last one on the command line is the one that actually gets carried out. so like, pick a lane. π
-h,--helpβ display command usage info. the classic. β¨-v,--versionβ display command version info. π«-l,--log [none|error|info|debug]β set the logging level. pick your vibe fromnone,error,info, ordebug. π-u,--unicodeβ use TSS UNICODE encoding for passwords, so it plays nice with applications using TSS popup boxes. π«Ά-s,--statusβ display the status of who can see the public portion of the Endorsement Key. π-r,--restrictβ restrict seeing the public portion of the Endorsement Key to the owner. main character only, periodt. π-z,--well-knownβ authenticate using 20 bytes of zeros as the owner password (that's the default TSS Well Known Secret) instead of prompting for an owner password. iconic shortcut fr fr. π
SEE ALSO
tpm_version(1), tpm_takeownership(8), tpm_getpubek(8), tcsd(8) π¦
REPORTING BUGS
found a bug? not the vibe. report it to <trousers-users@lists.sourceforge.net> π
and that's the whole page, bestie β brought to you by TPM Management, dated 2005-05-05, in all its tpm_restrictpubek(8) glory. slay, stay secure, and go restrict some public portions πβ¨π
π¦ where this page comes from
- debian bookworm: tpm-tools 1.3.9.2-0.1 Β· CPL
- debian trixie: tpm-tools 1.3.9.2-0.2 Β· CPL
- epel 10: tpm-tools 1.3.9-19.el10_0 Β· CPL-1.0
- epel 9: tpm-tools 1.3.9-13.el9 Β· CPL
- fedora 43: tpm-tools 1.3.9.2-5.fc43 Β· CPL-1.0
- fedora 43: tpm-tools 1.3.9.2-5.fc43 Β· CPL-1.0
- fedora 44: tpm-tools 1.3.9.2-6.fc44 Β· CPL-1.0
- fedora 44: tpm-tools 1.3.9.2-6.fc44 Β· CPL-1.0
- nixos 26.05: tpm-tools 1.3.9.2
- nixpkgs unstable: netbsd-source 11.0
- nixpkgs unstable: tpm-tools 1.3.9.2
- opensuse-leap 16.0: tpm-tools 1.3.9.2-160000.2.2 Β· IPL-1.0
- opensuse-leap 16.0: tpm-tools 1.3.9.2-160000.2.2 Β· IPL-1.0
- opensuse-leap 16.0: tpm-tools 1.3.9.2-160000.2.2 Β· IPL-1.0
- opensuse-leap 16.0: tpm-tools 1.3.9.2-160000.2.2 Β· IPL-1.0
- ubuntu jammy: tpm-tools 1.3.9.1-0.2ubuntu4
- ubuntu noble: tpm-tools 1.3.9.2-0.2build2 Β· CPL
- ubuntu questing: tpm-tools 1.3.9.2-0.2build2
- ubuntu resolute: tpm-tools 1.3.9.2-0.2build3 Β· CPL
- ubuntu stonking: tpm-tools 1.3.9.2-0.2build4 Β· CPL
- Copyright (C) 2005 International Business Machines Corporation
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms