NAME

       createprimary - Runs TPM2_CreatePrimary

DESCRIPTION

       --version-string=v1045 is not a valid option

       createprimary creates a primary storage key

       Runs TPM2_CreatePrimary

              [-hi  hierarchy (e, o, p, n) (default null)] [-pwdp password for hierarchy (default
              empty)] [-pwdpi password file name for hierarchy (default empty)]  [-pwdk  password
              for  key  (default  empty)]  [-iu  inPublic unique field file (default none)] [-opu
              public key file name (default do not save)] [oipem public key PEM format file  name
              (default do not save)] [-tk output ticket file name] [-ch output creation hash file
              name]

              [Asymmetric Key Algorithm]

              -rsa (default) -ecc curve

       bnp256 nistp256 nistp384

              Key attributes

       -bl data blob for unseal (create only)
              -if data file name

              -den decryption, RSA, not storage, NULL scheme -deo decryption, RSA,  not  storage,
              OAEP scheme -des encryption/decryption, AES symmetric

              [-116 for TPM rev 116 compatibility]

       -st storage
              [default for primary keys]

              -si  signing  -sir  restricted signing -dau create unrestricted ECDAA key pair -dar
              create restricted ECDAA key pair -kh keyed hash (hmac) -dp  derivation  parent  -gp
              general purpose, not storage

       [-kt (can be specified more than once)]
              f fixedTPM (default for primary keys and derivation parents) p fixedParent (default
              for primary keys and derivation parents) nf no fixedTPM  (default  for  non-primary
              keys) np no fixedParent (default for non-primary keys)

              [-da object subject to DA protection) (default no)]

              [-pol  policy  file  (default  empty)]  [-uwa userWithAuth attribute clear (default
              set)]

              [-nalg name hash algorithm (sha1, sha256, sha384) (default sha256)]  [-halg  scheme
              hash algorithm (sha1, sha256, sha384) (default sha256)]

       -se[0-2] session handle / attributes (default PWAP)

              01 continue 20 command decrypt 40 response encrypt

       --version is not a valid option

       createprimary creates a primary storage key

       Runs TPM2_CreatePrimary

              [-hi  hierarchy (e, o, p, n) (default null)] [-pwdp password for hierarchy (default
              empty)] [-pwdpi password file name for hierarchy (default empty)]  [-pwdk  password
              for  key  (default  empty)]  [-iu  inPublic unique field file (default none)] [-opu
              public key file name (default do not save)] [oipem public key PEM format file  name
              (default do not save)] [-tk output ticket file name] [-ch output creation hash file
              name]

              [Asymmetric Key Algorithm]

              -rsa (default) -ecc curve

       bnp256
              nistp256 nistp384

              Key attributes

       -bl data blob for unseal (create only)
              -if data file name

              -den decryption, RSA, not storage, NULL scheme -deo decryption, RSA,  not  storage,
              OAEP scheme -des encryption/decryption, AES symmetric

              [-116 for TPM rev 116 compatibility]

       -st storage
              [default for primary keys]

              -si  signing  -sir  restricted signing -dau create unrestricted ECDAA key pair -dar
              create restricted ECDAA key pair -kh keyed hash (hmac) -dp  derivation  parent  -gp
              general purpose, not storage

       [-kt (can be specified more than once)]
              f fixedTPM (default for primary keys and derivation parents) p fixedParent (default
              for primary keys and derivation parents) nf no fixedTPM  (default  for  non-primary
              keys) np no fixedParent (default for non-primary keys)

              [-da object subject to DA protection) (default no)]

              [-pol  policy  file  (default  empty)]  [-uwa userWithAuth attribute clear (default
              set)]

              [-nalg name hash algorithm (sha1, sha256, sha384) (default sha256)]  [-halg  scheme
              hash algorithm (sha1, sha256, sha384) (default sha256)]

       -se[0-2] session handle / attributes (default PWAP)

              01 continue 20 command decrypt 40 response encrypt

SEE ALSO

       The  full  documentation for createprimary is maintained as a Texinfo manual.  If the info
       and createprimary programs are properly installed at your site, the command

              info createprimary

       should give you access to the complete manual.