Scroll to navigation

TPM2-ABRMD(8) TPM2 Software Stack TPM2-ABRMD(8)

NAME

tpm2-abrmd - TPM2 access broker and resource management daemon

SYNOPSIS

tpm2-abrmd[-m][-e][-i][-o][-l logger-name][-r][-s][-g /dev/urandom][-t conf]

DESCRIPTION

tpm2-abrmdis a daemon that implements the TPM access broker and resource manager asdescribed by the Trusted Computing Group (TGC) in the“TSS System Level API and TPM Command Transmission InterfaceSpecification”.This daemon uses the DBus system bus and some pipes to communicate withclients.

OPTIONS

Provide the daemon with a string that describes the TCTI and how to configureit for communication with the next component down the TSS2 stack. This stringis formatted as "tcti-name:tcti-conf" where:
'tcti-name'
The name of the TCTI library shared object file. Libraries are found usingthe same algorithm as dlopen (3). If the TCTI library file name follows thenaming convention: libtss2-tcti-<name>.so.0 where <name> is the name for the TCTI, the value of <name> may be supplied in place of the full library file name. See 'EXAMPLES' below.
'tcti-conf'
The configuration string passed to the TCTI library upon initialization.

If this option is omitted (or a NULL string provided) then a default TCTI isused in it's default configuration. If the string does not contain a colonthen it will be interpreted as only the 'tcti-name'. To provide only theconfiguration string (using the default TCTI) then the first character in thestring passed to this option must be a colon followed by the configurationstring. See examples below.

Allow daemon to run as root. If this option is not provided the daemon willrefused to run as the root user. Use of this option is not recommended.
Set an upper bound on the number of concurrent client connections allowed.Once this number of client connections is reached new connections will berejected with an error. If the option is not specified the default is 27.
Flush all objects and sessions when daemon is started.
Direct logging output to named logging target. Supported targets arestdout and syslog. If the logger option is not specified the default is stdout.
Set and upper bound on the number of sessions that each client connectionis allowed to create (loaded or active) at any one time. If the option is notspecified the default is 4.
Set an upper bound on the number of transient objects that each clientconnection allowed to load. Once this number of objects is reached attemptsto load new transient objects will produce an error. If the option is notspecified the default is 27.
Claim the given name on dbus. This option overrides the default ofcom.intel.tss2.Tabrmd.
Read seed for pseudo-random number generator from the provided file.
Connect daemon to the session dbus. If the option is not specified the daemonconnects to the system dbus.
Display version string.

EXAMPLES

tpm2-abrmd
tpm2-abrmd --tcti=":/dev/tpm0"
tpm2-abrmd --tcti="device:/dev/tpm0"
tpm2-abrmd --tcti="libtss2-tcti-device.so.0:/dev/tpm0"
´libtss2-tcti-swtpm.so.0´.This connects to a TPM2 simulator via a TCP swtpm.
tpm2-abrmd --tcti="swtpm"
tpm2-abrmd --tcti="libtss2-tcti-swtpm.so.0"
´host=127.0.0.1,port=5555´:tpm2-abrmd --tcti=swtpm:host=127.0.0.1,port=5555"
tpm2-abrmd --tcti="libtss2-tcti-swtpm.so.0:host=127.0.0.1,port=5555"

AUTHOR

Philip Tricca <philip.b.tricca@intel.com>

SEE ALSO

tcsd(8)

COLOPHON

This page is part of the 3.0.0 release of Intel's TPM2 Access Broker &Resource Management Daemon. A description of the project, information aboutreporting bugs, and the latest version of this page can be found athttps://github.com/01org/tpm2-abrmd/.

March 2018 Intel