Skip to content

Latest commit

 

History

History
50 lines (30 loc) · 2.27 KB

provision.md

File metadata and controls

50 lines (30 loc) · 2.27 KB

% tpadm provision platform | Trusted Platform Commands Manual

NAME

platform provision - Provisions a new platform

SYNOPSIS

platform provision [OPTIONS] [ARGUMENT]

DESCRIPTION

platform provision - This command provisions a new platform according to the platform configuration file. The Trusted Platform Module is provisioned according to TCG provisioning guidance, with it's Endorsement Key persisted to the recommended handle index, a Shared Storage Root Key persisted to it's recommended handle index, and the EK certificate extracted from it's NV RAM index handle and imported into the configured Certificate Authority. If an EK certificate can not be found, a new certificate is issued from the configured CA. Initial platform measurements are captured and imported to blob storage for future integrity checks. Key stores and configured services are initialized. When this command completes, the platform and configured services are ready to begin servicing requests.

OPTIONS

References

common options collection of common options that provide information many users may expect.

TCG Provisioning Guidance

TCG EK Credential Profile

TCG Platform Attribute Credential Profile

TPM 2.0 Keys for Identity and Attestation

TCG OID Registry

TCG CPU to TPM Bus Protection Guidance

NOTES

EXAMPLES

Provision a new platform per TCG recommended guidance

tpadm platform provision

AUTHOR

Jeremy Hahn
https://github.com/jeremyhahn
https://www.linkdedin.com/in/jeremyhahn

COPYRIGHT

(c) 2024 Jeremy Hahn
All Rights Reserved