tpm2_unseal_cmd(9)

💅 tpm2_unseal_cmd(9) — the kernel API manual, bestie edition

okay so welcome to tpm2_unseal_cmd, straight out of the kernel API manual ✨ this is the little function whose whole personality is "execute a TPM2_Unseal command" — that's it, that's the gig 🫶

🌸 NAME 🌸

tpm2_unseal_cmd — execute a TPM2_Unseal command 💖

✨ SYNOPSIS ✨

int tpm2_unseal_cmd (struct tpm_chip *chip , struct trusted_key_payload
                     *payload , struct trusted_key_options *options , u32 blob_handle );

like… look at that signature. four args. main character energy fr fr 👑

🦋 ARGUMENTS 🦋

• chip — TPM chip to use 💅 this is the actual hardware friend we're talking to
• payload — the key data in clear and encrypted form 🎀 yes bestie, both forms, it's giving duality
• options — authentication values and other options 🔐 the vibe check credentials, basically
• blob_handle — blob handle 🌸 that's the whole description. short and iconic. periodt.

⭐ RETURN ⭐

• 0 — on success 🥳 slay, we ate
• -EPERM — on tpm error status 😭 the TPM said no and it's personal
• < 0 — error from tpm_send 💀 the send itself went sideways

ngl, keep an eye on these values — a nonzero return is your signal that the unseal did NOT happen, so don't go acting like it did 🙈

👑 SEE ALSO 👑

• Kernel file ./security/keys/trusted-keys/trusted_tpm2.c 📁
• tpm2_buf_append_auth(9)
• tpm2_seal_trusted(9)
• tpm2_load_cmd(9)
• tpm2_unseal_trusted(9)

go read those next, iykyk 🧚 the whole friend group is lowkey essential.

and that's the page, bestie — brought to you by the lovely humans over at ./security/keys/trusted-keys, dated October 2026, living under the tpm2_unseal_cmd(9) banner 🌈 stay unsealed, stay iconic, mwah 💜🎀