tpm_restrictsrk(8)

📦 version 1.3.9.2, in debian bookworm, debian trixie, fedora 43, fedora 44, nixos 26.05, nixpkgs unstable, opensuse-leap 16.0, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking

🎀 TPM Management — tpm_restrictsrk 🎀

okay so this one lives in section 8 of the System Manager's Manual, bestie, and it's all about the Storage Root Key. sit down, we're doing TPM lore 💅

✨ NAME ✨

tpm_restrictsrk — restrict the ability to access the Storage Root Key

🌸 SYNOPSIS 🌸

tpm_restrictsrk [OPTION]

💖 DESCRIPTION 💖

so like, tpm_restrictsrk reports the status of who can access the Storage Root Key. that's the default behavior, and it's also what you get with the --status option. no cap. 🫶

this operation stays in effect until the owner is cleared, and it prompts for the owner password. yes, it's gonna ask you for the owner password, so have it ready.

with the --restrict option, the ability to access the Storage Root Key is restricted to the owner. the command prompts for the owner password to complete the operation.

💀 heads up bestie: --allow and --restrict are mutually exclusive, and whichever one shows up last on the command line is the one that actually gets carried out. so order matters, fr fr.

here's the full flag lineup, every single one, no skips 👑

  • -h, --help — Display command usage info. (the "help me help you" button 🥺)
  • -v, --version — Display command version info. (who even am I ✨)
  • -l, --log [none|error|info|debug] — Set logging level. (pick your volume: none, error, info, or debug 🔊)
  • -u, --unicode — Use TSS UNICODE encoding for passwords to comply with applications using TSS popup boxes 🦋
  • -a, --allow — Allow SRK read access using SRK auth 🌈
  • -s, --status — Display the status of who can access the Storage Root Key 👀
  • -r, --restrict — Restrict SRK read to owner only 🔒
  • -z, --well-known — Authenticate using 20 bytes of zeros as owner password (the default TSS Well Known Secret), instead of prompting for an owner password. 💫

🦋 SEE ALSO 🦋

🙈 REPORTING BUGS 🙈

found a bug? spill it to <trousers-users@lists.sourceforge.net> — they wanna hear it, bestie 💌

and that's the whole vibe, main character energy only. this page came from the TPM Management set and it's dated 2019-01-27 — periodt. go restrict that SRK, you got this 🎀💖✨

📦 where this page comes from