chgkeyauth.1

IBM开发的TPM的驱动, 有少量的例子可以供参考

.\" Copyright 2004 IBM (Jeff Kravitz)
.\"
.\" Written Mar 25 2004, Jeff Kravitz
.\"
.TH chgkeyauth 1  2004-04-15 "IBM" "TPM Utilities"
.SH NAME
chgkeyauth \- change a key password
.SH SYNOPSIS

chgkeyauth [options] <parent key handle>
           <key file name> <old password> <new password>

.SH DESCRIPTION
This command changes the key use password for the specified key.
.SH ARGUMENTS
.TP 5
parent key handle
is an 8-hex-digit number that specifies the TPM handle assigned to the
key that is the parent key for the key being changed.  It is either
40000000 if the parent key is the Storage Root Key, or some other number,
assigned by the TPM, and usually obtained from the \fBloadkey\fP utility
when the parent key was loaded into the TPM.
.TP 5
key file
is the full pathname and extension of the file containing the key object
to be changed.
.TP 5
old password
is any character string, up to 256 bytes long.
It specifies the existing password needed to use the key being changed.
The actual "Authorization Data"
passed to the TPM is the 20 byte SHA1 hash of the user-specified password.
.TP 5
new password
is any character string, up to 256 bytes long.
It specifies the new password for the key being changed.
The actual "Authorization Data"
passed to the TPM is the 20 byte SHA1 hash of the user-specified password.
.SH OPTIONS
The following command line options are supported...
.TP 5                
-p <parpass>
specifies the parent key usage password,
which is any character string, up to 256 bytes long.
It specifies the password needed to use the parent of the key that is being modified.
The actual "Authorization Data"
passed to the TPM is the 20 byte SHA1 hash of the user-specified password.
.SH FILES
The input, unmodified, key file is saved as keyname\fB.save\fP and the new, modified key
is saved as the original keyname.
.SH "SEE ALSO"
loadkey(1)
.SH AUTHOR
Jeff Kravitz , IBM T. J. Watson Research Center