NAME

       tpm2_activatecredential -  Verify that the given content is protected with given keyHandle
       for given handle, and then decrypt and return the secret, if any passwd option is missing,
       assume NULL. Currently only support using TCG profile compliant EK as the keyHandle.

SYNOPSIS

       tpm2_activatecredential[     COMMON     OPTIONS     ]     [     TCTI     OPTIONS    ]    [
       --handle|--context|--keyHandle|--keyContext|--Password|--endorsePasswd|--inFile|--outFile|--passwdInHex|
       ]

       Verify that the given content is protected with given keyHandle for given handle, and then
       decrypt and return the secret, if any passwd option is  missing,  assume  NULL.  Currently
       only support using TCG profile compliant EK as the keyHandle.

DESCRIPTION

       tpm2_activatecredential  Verify  that  the given content is protected with given keyHandle
       for given handle, and then decrypt and return the secret, if any passwd option is missing,
       assume NULL. Currently only support using TCG profile compliant EK as the keyHandle.

OPTIONS

       -H ,--handle
              Handle of the object associated with the created  certificate by CA

       -c ,--context
              filename for handle context

       -k ,--keyHandle
              Loaded key used to decrypt the the random seed

       -C ,--keyContext
              filename for keyHandle context

       -P ,--Password
              the handle's password, optional

       -e ,--endorsePasswd
              the endorsement password, optional

       -f ,--inFile
              Input  file  path, containing the two structures  needed by tpm2_activatecredential
              function

       -o ,--outFile
              Output file path, record the secret to decrypt  the certificate

       -X ,--passwdInHex
              passwords given by any options are hex format.

       [COMMON OPTIONS ]
              This collection of options are common to many programs and provide information that
              many users may expect.

       -h, --help
              Display a manual describing the tool and its usage.

       -v, --version
              Display version information for this tool.

       -V, --verbose
              Increase the information that the tool prints to the console during its execution.

       [TCTI OPTIONS ]
              This collection of options are used to configure the varous TCTI modules available.

       -T, --tcti
              Select  the TCTI used for communication with the next component down the TSS stack.
              In most configurations this will be the TPM but it could be a simulator  or  proxy.
              Supported TCTIs are or “device” or “socket” .

       -d, --device-file
              Specify the TPM device file for use by the device TCTI. The default is /dev/tpm0.

       -R, --socket-address
              Specify  the  domain  name  or  IP  address used by the socket TCTI. The default is
              127.0.0.1.

       -p, --socket-port
              Specify the port number used by the socket TCTI. The default is 2321.

       ENVIRONMENT: TCTI
              This collection of environment variables that may be used to configure  the  varous
              TCTI  modules  available.   The  values  passed  through  these  variables  can  be
              overridden on a per-command basis using the available command line options.

       TPM2TOOLS_TCTI_NAME
              Select the TCTI used for communication with the next component down the TSS  stack.
              In  most  configurations this will be the TPM but it could be a simulator or proxy.
              See 'OPTIONS' section for the names of supported TCTIs.

       TPM2TOOLS_DEVICE_FILE
              Specify the TPM device file for use by the device TCTI.

       TPM2TOOLS_SOCKET_ADDRESS
              Specify the domain name or IP address used by the socket TCTI.

       TPM2TOOLS_SOCKET_PORT
              Specify the port number used by the socket TCTI.

EXAMPLES

       tpm2_activatecredential

              tpm2_activatecredential -H 0x81010002 -k 0x81010001 -P abc123 -e abc123 -f <filePath> -o <filePath>
              tpm2_activatecredential -c ak.context -C ek.context -P abc123 -e abc123 -f <filePath> -o <filePath>
              tpm2_activatecredential -H 0x81010002 -k 0x81010001 -P 123abc -e 1a1b1c -X -f <filePath> -o <filePath>