% tpm2_nvundefine(1) tpm2-tools | General Commands Manual

NAME

tpm2_nvundefine(1) - Delete a Non-Volatile (NV) index.

SYNOPSIS

tpm2_nvundefine [OPTIONS] [ARGUMENT]

DESCRIPTION

tpm2_nvundefine(1) - Deletes a Non-Volatile (NV) index that was previously defined with tpm2_nvdefine(1). The index is specified as an argument. It can be specified as raw handle or an offset value to the nv handle range "TPM2_HR_NV_INDEX".

The tool is also capable of deleting NV indices with attribute TPMA_NV_POLICY_DELETE, and the tool uses this attribute for the default hierarchy to select when -C is missing. The default value for -C is the "owner" hierarchy when TPMA_NV_POLICY_DELETE is clear and "platform" when TPMA_NV_POLICY_DELETE is set.

OPTIONS

-C, --hierarchy=OBJECT:

Specifies the hierarchy used to authorize. Supported options are:
- o for TPM_RH_OWNER
- p for TPM_RH_PLATFORM
- <num> where a hierarchy handle may be specified.
-P, --auth=AUTH:

Specifies the authorization value for the hierarchy.
-S, --session=_POLICYSESSION:

Specify a policy session to use when the NV index has attribute TPMA_NV_POLICY_DELETE set.
--cphash=FILE

File path to record the hash of the command parameters. This is commonly termed as cpHash. NOTE: When this option is selected, The tool will not actually execute the command, it simply returns a cpHash.
ARGUMENT the command line argument specifies the NV index or offset number.

References

context object format details the methods for specifying OBJECT.

authorization formatting details the methods for specifying AUTH.

common options collection of common options that provide information many users may expect.

common tcti options collection of options used to configure the various known TCTI modules.

EXAMPLES

Define an ordinary NV index and delete it

tpm2_nvdefine 1

tpm2_nvundefine 1

Define an ordinary NV index with attribute `TPMA_NV_POLICY_DELETE` and delete it

tpm2_startauthsession -S s.ctx

tpm2_policyauthvalue -S s.ctx

tpm2_policycommandcode -S s.ctx -L policy.dat TPM2_CC_NV_UndefineSpaceSpecial

tpm2_nvdefine -C p -s 32 \
  -a "ppread|ppwrite|authread|authwrite|platformcreate|policydelete|write_stclear|read_stclear" \
  -L policy.dat 1

tpm2_flushcontext s.ctx

tpm2_startauthsession --policy-session -S s.ctx

tpm2_policyauthvalue -S s.ctx

tpm2_policycommandcode -S s.ctx TPM2_CC_NV_UndefineSpaceSpecial

tpm2_nvundefine -S s.ctx 1

returns

footer

tpm2_nvundefine.1.md 2.7 KB Постоянная ссылка История Исходник