---
name: "tcsd.conf"
section: "5"
platform: "linux"
package: "trousers"
version: "0.3.15-0.4"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/tcsd.conf"
---

# tcsd.conf(5)

configuration file for the trousers TCS daemon.

TCG Software Stack

## NAME

tcsd.conf - configuration file for the trousers TCS daemon.

## DESCRIPTION

This file, by default */etc/tcsd.conf* is read by the trousers TCSD daemon, tcsd (see [tcsd(8)](/tcsd/8.md)). The tcsd.conf file that is installed by trousers contains all the default options, commented out.

## OPTIONS

**port** The port that TCSD will listen on for connections, local and remote, from applications.

**num\_threads** The maximum number of threads that the TCSD will spawn simultaneously to service applications. After **num\_threads** threads have been spawned, any application that attempts to connect to the TCSD will receive an error.

**system\_ps\_file** The location of the system persistent storage file. The system persistent storage file holds keys and data across restarts of the TCSD and system reboots.

**firmware\_log\_file** Path to the file containing the current firmware PCR event log data. The interface to this log is usually provided by the TPM device driver.

**kernel\_log\_file** Path to the file containing the current kernel PCR event log data. By default, this data will be parsed in the format provided by the Integrity Measurement Architecture LSM.

**firmware\_pcrs** A list of PCR indices that are manipulated only by the system firmware and therefore are not extended or logged by the TCSD. Applications that call Tcsi\_PcrExtend on PCRs listed here will receive an error.

**kernel\_pcrs** A list of PCR indices that are manipulated only by the kernel and therefore are not extended or logged by the TCSD. Applications that call Tcsi\_PcrExtend on PCRs listed here will receive an error.

**platform\_cred** Path to the platform credential for your TPM.  Your TPM manufacturer may have provided you with a set of credentials (certificates) that should be used when creating identities using your TPM. When a user of your TPM makes an identity, this credential will be encrypted as part of that process. See the 1.1b TPM Main specification section 9.3 for information on this process.

**conformance\_cred** Path to the conformance credential for your TPM.  Your TPM manufacturer may have provided you with a set of credentials (certificates) that should be used when creating identities using your TPM. When a user of your TPM makes an identity, this credential will be encrypted as part of that process. See the 1.1b TPM Main specification section 9.3 for information on this process.

**endorsement\_cred** Path to the endorsement credential for your TPM.  Your TPM manufacturer may have provided you with a set of credentials (certificates) that should be used when creating identities using your TPM. When a user of your TPM makes an identity, this credential will be encrypted as part of that process. See the 1.1b TPM Main specification section 9.3 for information on this process.

**remote\_ops** A list of TCS commands which will be allowed to be executed on this machine's TCSD by TSP's on non-local hosts (over the internet). By default, access to all operations is denied.

**host\_platform\_class** Determines the TCG specification of the host's platform class. This refers to one of the specifications contained in the TCG web site. The default is PC specification version 1.2 .

**all\_platform\_classes** Specifies all the TCG defined platforms associated with the host platform. The host\_platform\_class must not be defined here. By default, all platforms but the host platform are associated.

## EXAMPLE

-

  ```
  port = 30003
  num_threads = 10
  system_ps_file = /usr/local/var/tpm/system.data
  firmware_log_file = /proc/tpm/firmware_events
  kernel_log_file = /proc/tcg/measurement_events
  firmware_pcrs = 0,1,2,3,4,5,6,7
  kernel_pcrs = 10,11
  platform_cred = /usr/local/var/lib/tpm/platform.cert
  conformance_cred = /usr/local/var/lib/tpm/conformance.cert
  endorsement_cred = /usr/local/var/lib/tpm/endorsement.cert
  remote_ops = create_key,random
  host_platform_class = server_12
  all_platform_classes = pc_11,pc_12,mobile_12
  ```

## SEE ALSO

[**tcsd**(8)](/tcsd/8.md)

## AUTHOR

Kent Yoder

## REPORTING BUGS

Report bugs to \<trousers-tech@lists.sf.net\>