tpm_revokeek(8)

🌸 NAME 🌸

tpm_revokeek — bestie, this one revokes the Endorsement Key Pair of the TPM. yes, the whole thing. it's giving "we are SO done". 💅

✨ SYNOPSIS ✨

tpm_revokeek [OPTION]

💖 DESCRIPTION 💖

okay so. tpm_revokeek clears the TPM revocable Endorsement Key Pair — and it does it through the TPM_RevokeEndorsementKey API, no cap. ✨

and like, when I say it clears things, I mean it CLEARS things, queen. it erases:

• all counters (except the base one — she stays, she's the main character 🎀)
• the Ek
• the SRK
• the owner auth
• and any NVRAM that's locked to the owner auth

what it does not touch? the delegation tables. and other NVRAM. they're unbothered, they're thriving, leave them alone. 🦋

🫶 OPTIONS 🫶

• -h, --help — shows you the command usage info. the "what does this even do" button. 💖
• -v, --version — shows you the command version info. gotta know which era we're in. ⭐
• -l, --log [none|error|info|debug] — sets the logging level. pick your yap volume: none, error, info, or debug. 🔥
• -i, --infile [input file] — points at the file holding the authorization info you need to revoke the Ek — that's the secret data generated back during the revocable Ek creation process, iykyk. 👑 important: only the first 20 bytes of this file are used and the remaining ones are just… ignored. gone. not invited. 💀

🌈 SEE ALSO 🌈

tpm_version(1), tpm_createek(8), tpm_getpubek(8), tcsd(8)

🙈 REPORTING BUGS 🙈

found something cursed? report bugs to <trousers-users@lists.sourceforge.net> — they're lovely, fr fr. 💜

TPM Management • 2007-10-22 — yeah she's vintage, she's an icon, and that's the whole page bestie. mwah. 🎀💖✨