tpm_mkaik(8) [centos man page]

MAKE TPM 
AIK(8) 														   MAKE TPM AIK(8)

NAME

       tpm_mkaik

SYNOPSIS

       tpm_mkaik [-zuhv] BLOB-FILE PUBKEY-FILE

DESCRIPTION

       The  program  generates	a  TPM Attestation Identity Key and stores it in the file BLOB-FILE.  The public key is stored in the file PUBKEY-
       FILE.  The public key is DER encoded.

       -z     Use the well known secret used as the owner secret.

       -u     Use TSS UNICODE encoding for passwords.

       -h     Display command usage info.

       -v     Display command version info.

BUGS

       Sometimes, when tpm_mkaik is invoked without the -z option, no password prompt appears.	As a work around, use tpm_changeownerauth  to  set
       the secret to the well known one, generate the key, and then use tpm_changeownerauth to set the secret to its original value.

SEE ALSO

       tpm_quote_tools(8), tpm_changeownerauth(8)

								     Oct 2010							   MAKE TPM AIK(8)

tpm_takeownership(8)					      System Manager's Manual					      tpm_takeownership(8)

							TPM Management - tpm_takeownership

NAME

       tpm_takeownership - setup an owner on the TPM

SYNOPSIS

       tpm_takeownership [OPTION]

DESCRIPTION

       tpm_takeownership setup an owner on the system's TPM (via the TPM_TakeOwnership API).  This operation requires the TPM to be enabled and
       can be restricted by tpm_setownable.  The command will prompt for owner and SRK passwords and confirmations of these if executed without
       either of the -well-known options, otherwise, a secret of all zeros is set for the requested password.  After the second confirmation, be
       patient as the command may take awhile.

       -h, --help
	      Display command usage info.

       -v, --version
	      Display command version info.

       -l, --log [none|error|info|debug]
	      Set logging level.

       -u, --unicode
	      Use TSS UNICODE encoding for passwords to comply with applications using TSS popup boxes

       -y, --owner-well-known
	      Set a secret of all zeros (20 bytes of zeros) as the owner's secret.

       -z, --srk-well-known
	      Set a secret of all zeros (20 bytes of zeros) as the SRK secret.

SEE ALSO

       tpm_version(1), tpm_setownable(8), tpm_setenable(8), tcsd(8)

REPORTING BUGS

       Report bugs to <trousers-users@lists.sourceforge.net>

TPM Management							    2005-05-06						      tpm_takeownership(8)