tpm2_seal_trusted(9)

💖 tpm2_seal_trusted(9) — Kernel API Manual, bestie edition 💖

okay so we're in the Kernel API Manual and this page is literally about tpm2_seal_trusted, the function that seals the payload of a trusted key. no cap, that's the whole NAME vibe. 🎀

✨ NAME ✨

tpm2_seal_trusted — seal the payload of a trusted key. that's it, that's the glow-up. 💅

🌸 SYNOPSIS 🌸

the signature is giving “copy me exactly,” so here it is:

int tpm2_seal_trusted (struct tpm_chip *chip , struct
       trusted_key_payload *payload , struct trusted_key_options *options );

💅 ARGUMENTS 💅

okay so there are three things you hand over, and yes they all matter:

• chip — the TPM chip to use, bestie 🫶
• payload — the key data in clear and encrypted form (both forms, icon behavior ✨)
• options — authentication values and other options, the whole settings situation 🎀

🎀 RETURN 🎀

< 0 on error and 0 on success. that's the whole return story, fr fr 💖

🦋 SEE ALSO 🦋

go read these next, iykyk:

• Kernel file ./security/keys/trusted-keys/trusted_tpm2.c 📁
• tpm2_buf_append_auth(9)
• tpm2_load_cmd(9)
• tpm2_unseal_cmd(9)
• tpm2_unseal_trusted(9)

💌 signed, sealed, delivered by the ./security/keys/trusted-keys girlies, October 2026 — this tpm2_seal_trusted(9) page says mwah! 💋