author yamt <>
Tue, 17 Apr 2012 00:01:34 +0000
changeset 280360 e98874280705
permissions -rw-r--r--
sync with head

.\" Copyright (C) 2005 International Business Machines Corporation
.de Sh \" Subsection
.if t .Sp
.ne 5
.de Sp \" Vertical space (when we can't use .PP)
.if t .sp .5v
.if n .sp
.de Ip \" List item
.ie \\n(.$>=3 .ne \\$3
.el .ne 3
.IP "\\$1" \\$2
.TH "tpm_setownable" 8 "2005-05-06"  "TPM Management"
.ce 1
TPM Management - tpm_setownable 
tpm_setownable \- change whether the TPM allows tpm_takeownership operations 
.ad l
.hy 0
.B tpm_setownable

\fBtpm_setownable\fR reports the status of the TPM's flags regarding if the TPM can be owned.  This is the default behavior and also accessible via the \fB\-\-status\fR option. Requesting a report of this status prompts for the owner password.  The \fB\-\-allow\fR option sets the system's TPM to allow tpm_takeownership operations  
(via the TPM_SetOwnerInstall API).  This operation requires physical presence.  The \fB\-\-prevent\fR 
option (via the TPM_SetOwnerInstall API) prevents the TPM from accepting tpm_takeownership operations.  This operation requires physical presence.  These operations are persistent.  tpm_takeownership requires the tpm be enabled.

\fB\-h\fR, \fB\-\-help\fR
Display command usage info.
\fB-v\fR, \fB\-\-version\fR
Display command version info.
\fB-l\fR, \fB\-\-log\fR [none|error|info|debug]
Set logging level.
\fB-u\fR, \fB\-\-unicode\fR
Use TSS UNICODE encoding for passwords to comply with applications using TSS popup boxes
\fB-s\fR, \fB\-\-status\fR
Report the status of flags regarding if the TPM can be owned. 
\fB-a\fR, \fB\-\-allow\fR
Allow tpm_takeownership operations. 
\fB-p\fR, \fB\-\-prevent\fR
Prevent tpm_takeownership operations.
\fB-z\fR, \fB\-\-well-known\fR
Authenticate using 20 bytes of zeros as owner password (the default TSS Well Known Secret), instead of prompting for an owner password. 

\fBtpm_version\fR(1), \fBtpm_takeownership\fR(8), \fBtpm_setpresence\fR(8), \fBtpm_setenable\fR(8), \fBtcsd\fR(8)

Report bugs to <>