---
name: "lcp_writepol"
section: "8"
platform: "linux"
package: "tboot"
version: "1.9.12+hg20200718-1+b1"
release: "Debian 11 (Bullseye)"
platforms: ["linux"]
url: "https://new.carta.tech/lcp_writepol"
---

# lcp\_writepol(8)

write LCP policy into a TPM NV index

## NAME

lcp\_writepol - write LCP policy into a TPM NV index

## SYNOPSIS

**lcp\_writepol** **-i** *index-value* \[**-f** *policy-file* \| **-e**\] \[**-p** *passwd*\] \[**-h**\]

## DESCRIPTION

**lcp\_writepol** is used to write LCP policy into a (previously-defined) TPM NV index. It also  supports writing arbitrary data into a specified index.

## OPTIONS

- **-i** *index-value*

  Designate the index for writing. Index can be UINT32 or string. 3 strings are supported for the reserved LCP indices. Strings and default index  values for each string are:

  - default

    0x50000001(INDEX\_LCP\_DEF)

  - owner

    0x40000001(INDEX\_LCP\_OWN)

  - aux

    0x50000002(INDEX\_LCP\_AUX)

- **-f** *policy-file*

  File name where the policy data is stored.

- **-e**

  Write 0 length data to the index. This is useful for special indices, such as those permission is WRITEDFINE.

- **-p** *password*

  The TPM owner password

- **-h**

  Print out the help message

## EXAMPLES

**lcp\_writepol -i** *default*  **-f** *policy-file*

**lcp\_writepol -i** *0x00011101*  **-e**

**lcp\_writepol -i** *0x00011101*  **-f** *policy-file*  **-p** *123456*

## SEE ALSO

[**lcp\_readpol**(8)](/lcp_readpol/8.md), **lcp\_crtpol**(8).