diff --git a/pages/common/tpm2-pcrextend.md b/pages/common/tpm2-pcrextend.md new file mode 100644 index 0000000000..04678baad2 --- /dev/null +++ b/pages/common/tpm2-pcrextend.md @@ -0,0 +1,16 @@ +# tpm2 pcrextend + +> Extends a PCR. +> More information: . + +- Extend the PCR 16 value of the sha1 bank: + +`tpm2 pcrextend 16:sha1={{f1d2d2f924e986ac86fdf7b36c94bcdf32beec15}}` + +- Extend the PCR 16 value of the sha1 and sha256 banks value: + +`tpm2 pcrextend 16:sha1={{f1d2d2f924e986ac86fdf7b36c94bcdf32beec15}},sha256={{b5bb9d8014a0f9b1d61e21e796d78dccdf1352f23cd32812f4850b878ae4944c}}` + +- Extend the PCR 16 value of the sha1 bank and PCR 23 of the sha256 bank: + +`tpm2 pcrextend 16:sha1={{f1d2d2f924e986ac86fdf7b36c94bcdf32beec15}} 23:sha256={{b5bb9d8014a0f9b1d61e21e796d78dccdf1352f23cd32812f4850b878ae4944c}}` diff --git a/pages/common/tpm2-pcrread.md b/pages/common/tpm2-pcrread.md new file mode 100644 index 0000000000..fd51a6fd9a --- /dev/null +++ b/pages/common/tpm2-pcrread.md @@ -0,0 +1,16 @@ +# tpm2 pcrread + +> Read the PCR values from a TPM. +> More information: . + +- Read all PCR values: + +`tpm2 pcrread` + +- Read all PCR values of the sha256 bank: + +`tpm2 pcrread sha256:all` + +- Read specific PCR values from multiple banks and write them to a file: + +`tpm2 pcrread {{[-o|--output]}} {{path/to/file}} {{sha1:16,17,18+sha256:16,17,18}}` diff --git a/pages/common/tpm2-pcrreset.md b/pages/common/tpm2-pcrreset.md new file mode 100644 index 0000000000..8095b51420 --- /dev/null +++ b/pages/common/tpm2-pcrreset.md @@ -0,0 +1,13 @@ +# tpm2 pcrreset + +> Reset one or more PCR banks. +> Note: On operating system's locality, only PCR 16 and 23 can be reset. +> More information: . + +- Reset the PCR 23 banks: + +`tpm2 pcrreset 23` + +- Reset the PCR 16 and 23 banks: + +`tpm2 pcrreset 16 23` diff --git a/pages/common/tpm2.md b/pages/common/tpm2.md new file mode 100644 index 0000000000..cf34de54d0 --- /dev/null +++ b/pages/common/tpm2.md @@ -0,0 +1,29 @@ +# tpm2 + +> Run various tpm2-tools via a single unified executable. +> Some subcommands such as `pcrread`, `pcrreset`, etc. have their own usage documentation. +> More information: . + +- Reset the PCR 16 banks: + +`tpm2 pcrreset 16` + +- Extend the PCR 16 sha1 bank with `f1d2d2f924e986ac86fdf7b36c94bcdf32beec15`: + +`tpm2 pcrextend 16:sha1=f1d2d2f924e986ac86fdf7b36c94bcdf32beec15` + +- Read the PCR 16 sha1 bank: + +`tpm2 pcrread sha1:16` + +- Run a subcommand in verbose mode: + +`tpm2 {{[-V|--verbose]}} {{subcommand}}` + +- Run a subcommand without writing to `stdout`: + +`tpm2 {{[-Q|--quiet]}} {{subcommand}}` + +- Display help: + +`tpm2 {{[-h|--help]}}`