tpm_takeownership Command

Purpose

Sets up an owner on the Trusted Platform Module (TPM).

Syntax

tpm_takeownership [ -h ] [ -l [ none | error | info | debug ] ] [ -u ] [ -v ] [ -z ]

Description

The tpm_takeownership command sets up an owner on the system TPM (through the TPM_TakeOwnership API). This operation requires that the TPM be enabled and restricted by the tpm_setownable command. The command prompts for owner and security root key passwords and confirmations. This command can take a while to process.

Flags

Item Description
-h (or --help) Displays the command usage information.
-l (or --log) [ none | error | info | debug ] Sets the logging level to none, error, info, or debug as specified.
-u (or --unicode) Uses the Trusted Computing Group Software Stack (TSS) UNICODE encoding for the passwords to comply with the applications that are using the TSS popup boxes.
-v (or --version) Displays the command version information.
-y (or --owner-well-known) Sets the owner secret to all zeros (20 bytes of zeros).
-z (or --well-known) Changes the password to a new one when the current owner password is a secret of all zeros (20 bytes of zeros). It must be specified which password (owner, storage root key, or both) needs to be changed.