lcp_writepol(8) [centos man page]

LCP_WRITEPOL(8) 						   User Manuals 						   LCP_WRITEPOL(8)

NAME

       lcp_writepol - write LCP policy into a TPM NV index

SYNOPSIS

       lcp_writepol -i index-value [-f policy-file | -e] [-p passwd] [-h]

DESCRIPTION

       lcp_writepol is used to write LCP policy into a (previously-defined) TPM NV index. It also supports writing arbitrary data into a specified
       index.

OPTIONS

       -i index-value
	      Designate the index for writing. Index can be UINT32 or string. 3 strings are supported for the reserved LCP  indices.  Strings  and
	      default index values for each string are:

	      default
		     0x50000001(INDEX_LCP_DEF)

	      owner  0x40000001(INDEX_LCP_OWN)

	      aux    0x50000002(INDEX_LCP_AUX)

       -f policy-file
	      File name where the policy data is stored.

       -e     Write 0 length data to the index. This is useful for special indices, such as those permission is WRITEDFINE.

       -p password
	      The TPM owner password

       -h     Print out the help message

EXAMPLES

       lcp_writepol -i default	-f policy-file

       lcp_writepol -i 0x00011101  -e

       lcp_writepol -i 0x00011101  -f policy-file  -p 123456

SEE ALSO

       lcp_readpol(8), lcp_crtpol(8).

tboot								    2011-12-31							   LCP_WRITEPOL(8)

LCP_CRTPOL2(8)							   User Manuals 						    LCP_CRTPOL2(8)

NAME

       lcp_crtpol2 - create an Intel(R) TXT policy (and policy data file)

SYNOPSIS

       lcp_crtpol2 COMMAND [OPTION]

DESCRIPTION

       lcp_crtpol2 is used to create an Intel(R) TXT policy (and policy data file) for platforms produced after 2008.

OPTIONS

       --create
	      Create an TXT policy. The following options are available:

	      --type any|list	 type

	      --pol file	 policy file

	      [--ver version]	 version

	      [--minver ver]	 SINITMinVersion

	      [--rev ctr1,ctrN]  revocation values (comma separated, no spaces)

	      [--ctrl pol-ctrl]  policy control

	      [--data file]	 policy data file

	      [file]... 	 policy list files

       --show Show the content of policy file or policy data file. Available options are:

	      [--brief] 	 breif format output

	      [policy-file]	 policy file

	      [policy-data-file] policy data file

       --help Print out the help message.

       --verbose
	      Enable verbose output; can be specified with any command.

EXAMPLES

       Assuming  a  policy  list file list-unsig.lst has been created by the command lcp_crtpolist(8).	The following example will create a policy
       and policy data file.

       lcp_crtpol2 --create --type list --pol list.pol --data list.data list-unsig.lst

SEE ALSO

       lcp_crtpol(8), lcp_mlehash(8), lcp_crtpolelt(8), lcp_crtpollist(8).

tboot								    2011-12-31							    LCP_CRTPOL2(8)