NAME¶

tpm2-abrmd - TPM2 access broker and resource management daemon

SYNOPSIS¶

tpm2-abrmd [-c][-o][-l logger-name][-r][-s][-p /dev/urandom][-t tcti-name] [tcti-specific-options]

DESCRIPTION¶

tpm2-abrmd is a daemon that implements the TPM access broker and resource manager as described by the Trusted Computing Group (TGC) in the “TSS System Level API and TPM Command Transmission Interface Specification”. This daemon uses the DBus system bus and some pipes to communicate with clients.

OPTIONS¶

-c, --max-connections

Set an upper bound on the number of concurrent client connections allowed. Once this number of client connections is reached new connections will be rejected with an error.

-o, --fail-on-loaded-trans

Cause the daemon to fail on startup when the TPM is found to already have transient objects loaded. This is intended as a safe-guard to keep the daemon from stomping on the TPM state setup by another process.

-l, --logger

Direct logging output to named logging target. Supported targets are stdout and syslog. If the logger option is not specified the default is stdout.

-r, --max-transient-objects

Set an upper bound on the number of transient objects that each client connection allowed to load. Once this number of objects is reached attempts to load new transient objects will produce an error.

-n, --dbus-name

Claim the given name on dbus. This option overrides the default of com.intel.tss2.Tabrmd.

-p, --prng-seed-file

Read seed for pseudo-random number generator from the provided file.

-s, --session

Connect daemon to the session dbus. This option overrides the default behavior.

-t, --tcti

Select the TCTI used by tabd for communication with the next component down the TSS stack. In most configurations this will be the TPM but it could be a simulator or proxy. Supported TCTIs are “none” or “device” or “socket” .

-d, --tcti-device

Specify the TPM device file for use by the device TCTI. The default is /dev/tpm0.

-a, --tcti-socket-address

Specify the domain name or IP address used by the socket TCTI. The default is 127.0.0.1.

-p, --tcti-socket-port

Specify the port number used by the socket TCTI. The default is 2321.

-v, --version

Disply version string.

AUTHOR¶

Philip Tricca <philip.b.tricca@intel.com>

SEE ALSO¶

tcsd(8)

COLOPHON¶

This page is part of the 1.1.0 release of Intel's TPM2 Access Broker & Resource Management Daemon. A description of the project, information about reporting bugs, and the latest version of this page can be found at https://github.com/01org/tpm2-abrmd/.