tpm2_activatecredential(8)

NAME
tpm2_activatecredential - Verify that the given content is protected with given keyHandle for given handle, and then decrypt and return the secret, if any passwd option is missing, assume NULL. Currently only support using TCG profile compliant EK as the keyHandle.

SYNOPSIS
tpm2_activatecredential[ COMMON OPTIONS ] [ TCTI OPTIONS ] [ --handle|--context|--keyHandle|--keyContext|--Password|--endorsePasswd|--inFile|--outFile|--passwdInHex| ]

Verify that the given content is protected with given keyHandle for given handle, and then decrypt and return the secret, if any passwd option is missing, assume NULL. Currently only support using TCG profile compliant EK as the keyHandle.

DESCRIPTION
tpm2_activatecredential Verify that the given content is protected with given keyHandle for given handle, and then decrypt and return the secret, if any passwd option is missing, assume NULL. Currently only support using TCG profile compliant EK as the keyHandle.

OPTIONS

-H ,--handle
    Handle of the object associated with the created certificate by CA

-c ,--context
    filename for handle context

-k ,--keyHandle
    Loaded key used to decrypt the the random seed

-C ,--keyContext
    filename for keyHandle context

-P ,--Password
    the handle's password, optional

-e ,--endorsePasswd
    the endorsement password, optional

-f ,--inFile
    Input file path, containing the two structures needed by tpm2_activatecredential function

-o ,--outFile
    Output file path, record the secret to decrypt the certificate

-X ,--passwdInHex
    passwords given by any options are hex format. @COMMON_OPTIONS_INCLUDE@ @TCTI_OPTIONS_INCLUDE@

ENVIRONMENT@TCTI_ENVIRONMENT_INCLUDE@

EXAMPLES
tpm2_activatecredential

    tpm2_activatecredential -H 0x81010002 -k 0x81010001 -P abc123 -e abc123 -f <filePath> -o <filePath>
    tpm2_activatecredential -c ak.context -C ek.context -P abc123 -e abc123 -f <filePath> -o <filePath>
    tpm2_activatecredential -H 0x81010002 -k 0x81010001 -P 123abc -e 1a1b1c -X -f <filePath> -o <filePath>