---
name: "tpm_mkaik"
section: "8"
platform: "linux"
package: "tpm-quote-tools"
version: "1.0.4-1+b3"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/tpm_mkaik"
---

# tpm\_mkaik(8)

make a TPM Attestation Identity Key

## NAME

tpm\_mkaik - make a TPM Attestation Identity Key

## SYNOPSIS

**tpm\_mkaik** \[**-zuhv**\] BLOB-FILE PUBKEY-FILE\

## DESCRIPTION

The program generates a TPM Attestation Identity Key and stores it in the file BLOB-FILE. The public key is stored in the file PUBKEY-FILE. The public key is DER encoded.

- \-z

  Use the well known secret used as the owner secret.

- \-u

  Use TSS UNICODE encoding for passwords.

- \-h

  Display command usage info.

- \-v

  Display command version info.

## BUGS

Sometimes, when **tpm\_mkaik** is invoked without the -z option, no password prompt appears.  As a work around, use **tpm\_changeownerauth** to set the secret to the well known one, generate the key, and then use **tpm\_changeownerauth** to set the secret to its original value.

## SEE ALSO

[**tpm\_quote\_tools**(8)](/tpm_quote_tools/8.md), [**tpm\_changeownerauth**(8)](/tpm_changeownerauth/8.md)