lcp_mlehash(8) [centos man page]

LCP_MLEHASH(8)							   User Manuals 						    LCP_MLEHASH(8)

NAME

       lcp_mlehash - generate a SHA-1 hash of a TXT MLE binary file suitable for use in a TXT launch control policy

SYNOPSIS

       lcp_mlehash [-v] [-c cmdline] [-h] mle-file

DESCRIPTION

       lcp_mlehash is used to generate a SHA-1 hash of the portion of an executable file that contains the Intel(R) TXT measured launched environ-
       ment (MLE).  In the MLE binary file, the portion of the file to be used as the MLE is specified in the MLE header  structure.   If  verbose
       mode is not used, the output is suitable for use as the mle-file to the lcp_crtpol and lcp_crtpolelt commands.

OPTIONS

       mle-file
	      File name of the MLE binary.  If it is a gzip file then it will be un-ziped before hashing.

       -v     Verbose mode, display progress indications.

       -c cmdline
	      Specify  quote-delimited	command  line. It is important to specify the command line that is used when launching the MLE or the hash
	      will not match what is calculated by SINIT.

       -h     Print out the help message.

EXAMPLES

       lcp_mlehash -c "logging=memory,serial,vga" /boot/tboot.gz > mle-hash

SEE ALSO

       lcp_readpol(8), lcp_writepol(8), lcp_crtpol(8), lcp_crtpolelt(8).

tboot								    2011-12-31							    LCP_MLEHASH(8)

LCP_READPOL(8)							   User Manuals 						    LCP_READPOL(8)

NAME

       lcp_readpol - read the contents of an LCP policy index

SYNOPSIS

       lcp_readpol -i index-value [-f policy-file] [-s size] [-p passwd] [-h]

DESCRIPTION

       lcp_readpol  is	used  to read the contents of an LCP policy index.  Any index can be specified but the output will be parsed as if it con-
       tained a policy.

OPTIONS

       -i index-value
	      Designate the index for reading. Index can be UINT32 or string. 3 strings are supported for the reserved LCP  indices.  Strings  and
	      default index values for each string are:

	      default
		     0x50000001(INDEX_LCP_DEF)

	      owner  0x40000001(INDEX_LCP_OWN)

	      aux    0x50000002(INDEX_LCP_AUX)

       -f policy-file
	      File name to write the policy data to. If no file name is specified then the contents will be displayed.

       -s size
	      Value size to read from NV store. If no size inputted, read by length as this index defined.

       -p password
	      The TPM owner password

       -h     Print out the help message

EXAMPLES

       lcp_readpol -i default  -f policy-file

       lcp_readpol -i 0x00011101  -s 10

       lcp_readpol -i 0x00011101  -f policy-file  -p 123456

SEE ALSO

       lcp_writepol(8), lcp_crtpol(8).

tboot								    2011-12-31							    LCP_READPOL(8)