---
name: "tpm_changeownerauth"
section: "8"
platform: "linux"
package: "tpm-tools"
version: "1.3.9.2-0.2"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/tpm_changeownerauth"
---

# tpm\_changeownerauth(8)

change the authorization data associated with the owner or SRK

TPM Management - tpm\_changeownerauth

## NAME

tpm\_changeownerauth - change the authorization data associated with the owner or SRK

## SYNOPSIS

**tpm\_changeownerauth** \[**OPTION**\]

## DESCRIPTION

**tpm\_changeownerauth** allows for changing the authorization data for the TPM owner or the TPM's Storage Root Key   (via the TPM\_ChangeAuthOwner API).  This operation prompts for current password, followed by the new password and a confirmation of the new password. The **--owner** option changes the TPM owner password and **--srk** option changes the TPM's SRK password. The **--well-known** option is used when SRK or owner passwords need to be changed and current owner password is a secret of zeros, **--set-well-known** option changes current password to a secret of zeros, both options do not work by themselves, they must be used with **--owner** and **--srk** options to indicate which of these passwords will be changed.

- **-h**, **--help**

  Display command usage info.

- **-v**, **--version**

  Display command version info.

- **-l**, **--log** \[none\|error\|info\|debug\]

  Set logging level.

- **-u**, **--unicode**

  Use TSS UNICODE encoding for passwords to comply with applications using TSS popup boxes

- **-o**, **--owner**

  Change the authorization data for the TPM owner.

- **-s**, **--srk**

  Change the authorization data for the TPM's Storage Root Key.

- **-g**, **--original\_password\_unicode**

  Use TSS UNICODE encoding for original password to comply with applications using TSS popup boxes

- **-n**, **--new\_password\_unicode**

  Use TSS UNICODE encoding for new password to comply with applications using TSS popup boxes

- **-z**, **--well-known**

  Change password to a new one when current owner password is a secret of all zeros (20 bytes of zeros). It must be specified which password (owner, SRK or both) to change

- **-r**, **--set-well-known**

  Change password to a secret of all zeros (20 bytes of zeros). It must be specified which password (owner, SRK or both) to change

- [**tpm\_version**(1)](/tpm_version/1.md), [**tpm\_takeownership**(8)](/tpm_takeownership/8.md), [**tcsd**(8)](/tcsd/8.md)

  ## SEE ALSO

## REPORTING BUGS

Report bugs to \<trousers-users@lists.sourceforge.net\>