TSSCREATEEK
Section: User Commands (1)
Updated: November 2020
Page Index
NAME
tsscreateek - Runs TPM2 createek
DESCRIPTION
createek
Parses and prints the various EK NV indexes specified by the IWG
Creates an EK primary key based on the EK NV indexes
- [-pwde
-
endorsement hierarchy password (default empty)]
- [-pwdk
-
password for endorsement key (default empty)]
- [-high
-
Use the IWG NV high range. Specify before algorithm]
-
-rsa keybits
-
- 2048
3072
4096
-
-ecc curve
-
- nistp256
nistp384
nistp521
- -te
-
print EK Template
- -no
-
print EK nonce
- -ce
-
print EK certificate
- -cp
-
CreatePrimary using the EK template and EK nonce.
Validate the EK against the EK certificate
- [-noflush
-
Do not flush the primary key after validation]
- [-root
-
filename - validate EK certificate against the root]
filename contains a list of PEM format CA root certificate
filenames, one per line.
The list may contain up to 100 certificates.