ek.cnf 1.5 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465
  1. oid_section = tcg_oids
  2. [ tcg_oids ]
  3. tcg-sv-tpm20 = 2.23.133.1.2
  4. tcg-at-tpmManufacturer = 2.23.133.2.1
  5. tcg-at-tpmModel = 2.23.133.2.2
  6. tcg-at-tpmVersion = 2.23.133.2.3
  7. tcg-at-tpmSpecification = 2.23.133.2.16
  8. tcg-at-tpmSecurityAssertions = 2.23.133.2.18
  9. tcg-kp-EKCertificate = 2.23.133.8.1
  10. [ req ]
  11. prompt = no
  12. distinguished_name = distinguished_name
  13. subjectAltName = subject_alt_name
  14. [ distinguished_name ]
  15. commonName = this-tpm-sim
  16. organizationName = tpm2-tss-testsuit
  17. [ req_ext ]
  18. subjectKeyIdentifier = hash
  19. [ ek_ext ]
  20. certificatePolicies = @polsect
  21. subjectAltName = dirName:subAltName
  22. basicConstraints = critical, CA:FALSE
  23. subjectDirectoryAttributes = ASN1:SEQUENCE:subDirAttr
  24. authorityKeyIdentifier = keyid:always
  25. authorityInfoAccess = caIssuers;URI.0:INTERMEDCRT
  26. crlDistributionPoints = URI.0:INTERMEDCRL
  27. keyUsage = critical, keyEncipherment
  28. #extendedKeyUsage = tcg-kp-EKCertificate
  29. extendedKeyUsage = 2.23.133.8.1
  30. [ polsect ]
  31. policyIdentifier = anyPolicy
  32. CPS.1="http://my.host.name/"
  33. [ subAltName ]
  34. #TPMManufacturer = 'TSS2'
  35. .2.23.133.2.1 = id:54535332
  36. .2.23.133.2.2 = tpmsimulator
  37. .2.23.133.2.3 = id:00020008
  38. #TODO: Remove
  39. [ subAltName1 ]
  40. C=DE
  41. O=Testing
  42. OU=whatever
  43. commonName=abc
  44. [ subDirAttr ]
  45. tcg-at-tpmSpecification = SEQUENCE:tpmspec
  46. #tcg-at-tpmSecurityAssertions = SEQUENCE:secassert
  47. [ tpmspec ]
  48. family = UTF8:2.0
  49. level = INT:0
  50. revision = INT:138
  51. #[ secassert ]
  52. #version = INT:0
  53. #fieldUpgradable = BOOL:false
  54. #...