---
name: "tsscreateloaded"
section: "1"
platform: "linux"
package: "tss2"
version: "1045-2"
release: "Debian 12 (Bookworm)"
platforms: ["linux"]
url: "https://new.carta.tech/tsscreateloaded"
---

# tsscreateloaded(1)

Runs TPM2\_CreateLoaded

## NAME

createloaded - Runs TPM2\_CreateLoaded

## DESCRIPTION

**--version-string**=*v1045* is not a valid option

createloaded

Runs TPM2\_CreateLoaded

**-hp** parent handle (can be hierarchy)

-

  40000001 Owner 4000000c Platform 4000000b Endorsement

-

  \[Asymmetric Key Algorithm\]

-

  **-rsa** (default) **-ecc** curve

- bnp256

  nistp256 nistp384

-

  Key attributes

- **-bl** data blob for unseal (create only)

  **-if** data file name

-

  **-den** decryption, RSA, not storage, NULL scheme **-deo** decryption, RSA, not storage, OAEP scheme **-des** encryption/decryption, AES symmetric

-

  \[-116 for TPM rev 116 compatibility\]

- **-st** storage

  \[default for primary keys\]

-

  **-si** signing **-sir** restricted signing **-dau** create unrestricted ECDAA key pair **-dar** create restricted ECDAA key pair **-kh** keyed hash (hmac) **-dp** derivation parent **-gp** general purpose, not storage

- \[-kt (can be specified more than once)\]

  f fixedTPM (default for primary keys and derivation parents) p fixedParent (default for primary keys and derivation parents) nf no fixedTPM (default for non-primary keys) np no fixedParent (default for non-primary keys)

-

  \[-da object subject to DA protection) (default no)\]

-

  \[-pol policy file (default empty)\] \[-uwa userWithAuth attribute clear (default set)\]

-

  \[-nalg name hash algorithm (sha1, sha256, sha384) (default sha256)\] \[-halg scheme hash algorithm (sha1, sha256, sha384) (default sha256)\]

-

  \[-der object's parent is a derivation parent\]

-

  \[-pwdk password for key (default empty)\] \[-pwdp password for parent key (default empty)\]

-

  \[-opu public key file name (default do not save)\] \[-opr private key file name (default do not save)\] \[-opem public key PEM format file name (default do not save)\]

**-se\[0-2\]** session handle / attributes (default PWAP)

-

  01 continue 20 command decrypt 40 response encrypt

**--version** is not a valid option

createloaded

Runs TPM2\_CreateLoaded

**-hp** parent handle (can be hierarchy)

-

  40000001 Owner 4000000c Platform 4000000b Endorsement

-

  \[Asymmetric Key Algorithm\]

-

  **-rsa** (default) **-ecc** curve

- bnp256

  nistp256 nistp384

-

  Key attributes

- **-bl** data blob for unseal (create only)

  **-if** data file name

-

  **-den** decryption, RSA, not storage, NULL scheme **-deo** decryption, RSA, not storage, OAEP scheme **-des** encryption/decryption, AES symmetric

-

  \[-116 for TPM rev 116 compatibility\]

- **-st** storage

  \[default for primary keys\]

-

  **-si** signing **-sir** restricted signing **-dau** create unrestricted ECDAA key pair **-dar** create restricted ECDAA key pair **-kh** keyed hash (hmac) **-dp** derivation parent **-gp** general purpose, not storage

- \[-kt (can be specified more than once)\]

  f fixedTPM (default for primary keys and derivation parents) p fixedParent (default for primary keys and derivation parents) nf no fixedTPM (default for non-primary keys) np no fixedParent (default for non-primary keys)

-

  \[-da object subject to DA protection) (default no)\]

-

  \[-pol policy file (default empty)\] \[-uwa userWithAuth attribute clear (default set)\]

-

  \[-nalg name hash algorithm (sha1, sha256, sha384) (default sha256)\] \[-halg scheme hash algorithm (sha1, sha256, sha384) (default sha256)\]

-

  \[-der object's parent is a derivation parent\]

-

  \[-pwdk password for key (default empty)\] \[-pwdp password for parent key (default empty)\]

-

  \[-opu public key file name (default do not save)\] \[-opr private key file name (default do not save)\] \[-opem public key PEM format file name (default do not save)\]

**-se\[0-2\]** session handle / attributes (default PWAP)

-

  01 continue 20 command decrypt 40 response encrypt

## SEE ALSO

The full documentation for **createloaded** is maintained as a Texinfo manual.  If the **info** and **createloaded** programs are properly installed at your site, the command

-

  **info createloaded**

should give you access to the complete manual.