Login or Register to Ask a Question and Join Our Community

Linux and UNIX Man Pages

Linux & Unix Commands - Search Man Pages

tpm_sealdata(1) [debian man page]

tpm_sealdata(1) 					      General Commands Manual						   tpm_sealdata(1)

							  TPM Management - tpm_sealdata

NAME

       tpm_sealdata - seal input data to the system's TPM

SYNOPSIS

       tpm_sealdata [OPTION]

DESCRIPTION

       tpm_sealdata seals sensitive input data to the SRK of the system's TPM and optionally a PCR configuration.  Backup your data, it is
       unrecoverable from this format if the SRK changes or the specified PCR configuration is unreproducable.	The result can be unsealed by
       functions in libtpm_unseal, such as tpmUnsealFile(3).

       -h, --help
	      Display command usage info.

       -v, --version
	      Display command version info.

       -l, --log [none|error|info|debug]
	      Set logging level.

       -i, --infile FILE
	      File containing input data to seal.

       -o, --outfile FILE
	      Output file.  Default is STDOUT.

       -p, --pcr NUMBER
	      Seal data to the current value of the specified pcr. This option can be given NUM_PCRS times.  The specified pcr is in the range of
	      0 to NUM_PCRS-1. NUM_PCRS is at least 16 but may vary by platform.

       -z, --well-known
	      Use TSS_WELL_KNOWN_SECRET (20 zero bytes) as the SRK password. You will not be prompted for the SRK password with this option.

       -u, --unicode
	      Use TSS UNICODE encoding for the SRK password to comply with applications using TSS popup boxes.

SEE ALSO

       tpm_takeownership(8), tpmUnsealFile(3)

REPORTING BUGS

       Report bugs to <trousers-users@lists.sourceforge.net>

TPM Management							    2005-08-10							   tpm_sealdata(1)

Check Out this Related Man Page

tpm_sealdata(3) 					     Library Functions Manual						   tpm_sealdata(3)

					TPM Management - tpmUnsealFile, tpmUnsealShred, tpmUnsealStrerror

NAME

       tpmUnsealFile, tpmUnsealShred, tpmUnsealStrerror - unseal routines

SYNOPSIS

       #include <tpm_unseal/tpm_unseal.h>

       int tpmUnsealFile(char* file, char** data, int* size);
       void tpmUnsealShred(char* data, int size);
       char* tpmUnsealStrerror(int rc);

DESCRIPTION

       The functions in the tpmUnseal family allow access to a piece of sensitive data that has been sealed to the TPM configuration of a given
       system if the conditions are right, that is the SRK has not changed and the PCRS (if any) specified at seal time are of the appropriate
       value.

       The tpmUnsealFile function returns the contents of the file unsealed in the data buffer.  The memory at *data must be freed by the caller.

       The tpmUnsealShred function will zero and free the memory.

       The tpmUnsealStrerror function will convert the return code from tpmUnsealFile into a human comprehensible string using and internal errno
       variable.

Return Value
       The tpmUnsealFile function returns 0 on success and a negative number on error.	The tpmUnsealStrerror function returns the error string on
       success and the empty string on an error.

SEE ALSO

       tpm_sealdata(1)

REPORTING BUGS

       Report bugs to <trousers-users@lists.sourceforge.net>

TPM Management							    2005-08-10							   tpm_sealdata(3)
Man Page