carta
tsspolicysigned(1)

tsspolicysigned1

Runs tpm2_policysigned

Overview

--version-string=v1045 is not a valid option

policysigned

Runs TPM2_PolicySigned

-hk signature verification key handle

-ha policy session handle

-in nonceTPM file (default none)

-cp cpHash file (default none)

-pref policyRef file (default none)

-exp expiration in decimal (default none)

-halg (sha1, sha256) (default sha256)

-sk RSA signing key file name (PEM format)

This utility uses this signing key. A real application might use a smart card or other HSM.

-pwdk signing key password (default null)

[-tk ticket file name] [-to timeout file name]

--version is not a valid option

policysigned

Runs TPM2_PolicySigned

-hk signature verification key handle

-ha policy session handle

-in nonceTPM file (default none)

-cp cpHash file (default none)

-pref policyRef file (default none)

-exp expiration in decimal (default none)

-halg (sha1, sha256) (default sha256)

-sk RSA signing key file name (PEM format)

This utility uses this signing key. A real application might use a smart card or other HSM.

-pwdk signing key password (default null)

[-tk ticket file name] [-to timeout file name]

From tss2 1045-2 in Debian 12 (Bookworm). Parsed by carta from the page's man source.