<commit_before>% tpm2_createak(1) tpm2-tools | General Commands Manual
%
% SEPTEMBER 2017

# NAME

**tpm2_createak**(1) - Generate attestation key with given algorithm under the
endorsement hierarchy.

# SYNOPSIS

**tpm2_createak** [*OPTIONS*]

# DESCRIPTION

**tpm2_createak**(1) - Generate an attestation key (AK) with the given
algorithm under the endorsement hierarchy. It also makes it persistent
with given AK handle supplied via **-H**. If **-p** is specified, the
tool outputs the public key to the path supplied as the option argument.

If any passwd option is missing, assume NULL.

The tool outputs to stdout a YAML representation of the loaded key handle
as well as it's name, for example:
```
loaded-key:
  handle: 800000ff
  name: <KEY>
```

# OPTIONS

  * **-e**, **--endorse-passwd**=_ENDORSE\_PASSWORD_:
    Specifies current endorsement password, defaults to NULL.
    Passwords should follow the "password formatting standards, see section
    "Password Formatting".

  * **-P**, **--ak-passwd**=_AK\_PASSWORD_
    Specifies the AK password when created, defaults to NULL.
    Same formatting as the endorse password value or -e option.

  * **-o**, **--owner-passwd**=_OWNER\_PASSWORD_
    Specifies the current owner password, defaults to NULL.
    Same formatting as the endorse password value or -e option.

  * **-E**, **--ek-handle**=_EK\_HANDLE_:
    Specifies the handle used to make EK persistent.

  * **-k**, **--ak-handle**=_AK\_HANDLE_:
    Specifies the handle used to make AK persistent.

  * **-c**, **--context**=_PATH_:
    Optional, specifies a path to save the context of the AK handle. If one saves
    the context file via this option and the public key via the **-p** option, the
    AK can be restored via a call to tpm2_loadexternal(1).

  * **-g**, **--algorithm**=_ALGORITHM_:
    Specifies the algorithm type of AK. Algorithms should follow the
    " formatting standards, see section "Algorithm Specifiers".
    See section "Supported Public Object Algorithms" for a list of supported
    object algorithms.

  * **-g**, **--alg**=_ALGORITHM_:
    Like -g, but specifies the algorithm of sign.
    See section "Supported Signing Algorithms" for details.<commit_msg>tpm2_createak: fix manpage double -g options<commit_after>% tpm2_createak(1) tpm2-tools | General Commands Manual
%
% SEPTEMBER 2017

# NAME

**tpm2_createak**(1) - Generate attestation key with given algorithm under the
endorsement hierarchy.

# SYNOPSIS

**tpm2_createak** [*OPTIONS*]

# DESCRIPTION

**tpm2_createak**(1) - Generate an attestation key (AK) with the given
algorithm under the endorsement hierarchy. It also makes it persistent
with given AK handle supplied via **-H**. If **-p** is specified, the
tool outputs the public key to the path supplied as the option argument.

If any passwd option is missing, assume NULL.

The tool outputs to stdout a YAML representation of the loaded key handle
as well as it's name, for example:
```
loaded-key:
  handle: 800000ff
  name: <KEY>
```

# OPTIONS

  * **-e**, **--endorse-passwd**=_ENDORSE\_PASSWORD_:
    Specifies current endorsement password, defaults to NULL.
    Passwords should follow the "password formatting standards, see section
    "Password Formatting".

  * **-P**, **--ak-passwd**=_AK\_PASSWORD_
    Specifies the AK password when created, defaults to NULL.
    Same formatting as the endorse password value or -e option.

  * **-o**, **--owner-passwd**=_OWNER\_PASSWORD_
    Specifies the current owner password, defaults to NULL.
    Same formatting as the endorse password value or -e option.

  * **-E**, **--ek-handle**=_EK\_HANDLE_:
    Specifies the handle used to make EK persistent.

  * **-k**, **--ak-handle**=_AK\_HANDLE_:
    Specifies the handle used to make AK persistent.

  * **-c**, **--context**=_PATH_:
    Optional, specifies a path to save the context of the AK handle. If one saves
    the context file via this option and the public key via the **-p** option, the
    AK can be restored via a call to tpm2_loadexternal(1).

  * **-g**, **--algorithm**=_ALGORITHM_:
    Specifies the algorithm type of AK. Algorithms should follow the
    " formatting standards, see section "Algorithm Specifiers".
    See section "Supported Public Object Algorithms" for a list of supported
    object algorithms.

  * **-D**, **--digest-alg**=_ALGORITHM_:
    Like -g, but specifies the algorithm of sign.
    See section "Supported Signing Algorithms" for details.
{'fraction_non_alphanumeric': 0.10864695340501793, 'fraction_numerical': 0.009184587813620072, 'mean_word_length': 3.7702991452991452, 'pattern_counts': {'":': 0, '<': 5, '<?xml version=': 0, '>': 5, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '1741875', 'n_tokens_mistral': 1386, 'n_tokens_neox': 1304, 'n_words': 548}