lcp_mlehash(8) [centos man page]

LCP_MLEHASH(8)							   User Manuals 						    LCP_MLEHASH(8)

NAME

       lcp_mlehash - generate a SHA-1 hash of a TXT MLE binary file suitable for use in a TXT launch control policy

SYNOPSIS

       lcp_mlehash [-v] [-c cmdline] [-h] mle-file

DESCRIPTION

       lcp_mlehash is used to generate a SHA-1 hash of the portion of an executable file that contains the Intel(R) TXT measured launched environ-
       ment (MLE).  In the MLE binary file, the portion of the file to be used as the MLE is specified in the MLE header  structure.   If  verbose
       mode is not used, the output is suitable for use as the mle-file to the lcp_crtpol and lcp_crtpolelt commands.

OPTIONS

       mle-file
	      File name of the MLE binary.  If it is a gzip file then it will be un-ziped before hashing.

       -v     Verbose mode, display progress indications.

       -c cmdline
	      Specify  quote-delimited	command  line. It is important to specify the command line that is used when launching the MLE or the hash
	      will not match what is calculated by SINIT.

       -h     Print out the help message.

EXAMPLES

       lcp_mlehash -c "logging=memory,serial,vga" /boot/tboot.gz > mle-hash

SEE ALSO

       lcp_readpol(8), lcp_writepol(8), lcp_crtpol(8), lcp_crtpolelt(8).

tboot								    2011-12-31							    LCP_MLEHASH(8)

LCP_CRTPOL2(8)							   User Manuals 						    LCP_CRTPOL2(8)

NAME

       lcp_crtpol2 - create an Intel(R) TXT policy (and policy data file)

SYNOPSIS

       lcp_crtpol2 COMMAND [OPTION]

DESCRIPTION

       lcp_crtpol2 is used to create an Intel(R) TXT policy (and policy data file) for platforms produced after 2008.

OPTIONS

       --create
	      Create an TXT policy. The following options are available:

	      --type any|list	 type

	      --pol file	 policy file

	      [--ver version]	 version

	      [--minver ver]	 SINITMinVersion

	      [--rev ctr1,ctrN]  revocation values (comma separated, no spaces)

	      [--ctrl pol-ctrl]  policy control

	      [--data file]	 policy data file

	      [file]... 	 policy list files

       --show Show the content of policy file or policy data file. Available options are:

	      [--brief] 	 breif format output

	      [policy-file]	 policy file

	      [policy-data-file] policy data file

       --help Print out the help message.

       --verbose
	      Enable verbose output; can be specified with any command.

EXAMPLES

       Assuming  a  policy  list file list-unsig.lst has been created by the command lcp_crtpolist(8).	The following example will create a policy
       and policy data file.

       lcp_crtpol2 --create --type list --pol list.pol --data list.data list-unsig.lst

SEE ALSO

       lcp_crtpol(8), lcp_mlehash(8), lcp_crtpolelt(8), lcp_crtpollist(8).

tboot								    2011-12-31							    LCP_CRTPOL2(8)