NAME

       tcsd.conf - configuration file for the trousers TCS daemon.

DESCRIPTION

       This  file,  by  default  /etc/tcsd.conf  is  read  by  the trousers TCSD daemon, tcsd (see tcsd(8)). The
       tcsd.conf file that is installed by trousers contains all the default options, commented out.

OPTIONS

       port The port that TCSD will listen on for connections, local and remote, from applications.

       num_threads  The  maximum  number  of  threads  that  the  TCSD  will  spawn  simultaneously  to  service
       applications.  After  num_threads  threads have been spawned, any application that attempts to connect to
       the TCSD will receive an error.

       system_ps_file The location of the system persistent storage file. The  system  persistent  storage  file
       holds keys and data across restarts of the TCSD and system reboots.

       firmware_log_file  Path  to the file containing the current firmware PCR event log data. The interface to
       this log is usually provided by the TPM device driver.

       kernel_log_file Path to the file containing the current kernel PCR event log data. By default, this  data
       will be parsed in the format provided by the Integrity Measurement Architecture LSM.

       firmware_pcrs  A  list  of PCR indices that are manipulated only by the system firmware and therefore are
       not extended or logged by the TCSD. Applications that  call  Tcsi_PcrExtend  on  PCRs  listed  here  will
       receive an error.

       kernel_pcrs  A list of PCR indices that are manipulated only by the kernel and therefore are not extended
       or logged by the TCSD. Applications that call Tcsi_PcrExtend on PCRs listed here will receive an error.

       platform_cred Path to the platform credential for your TPM.  Your TPM manufacturer may have provided  you
       with  a  set  of  credentials (certificates) that should be used when creating identities using your TPM.
       When a user of your TPM makes an identity, this credential will be encrypted as part of that process. See
       the 1.1b TPM Main specification section 9.3 for information on this process.

       conformance_cred  Path  to  the  conformance  credential  for  your  TPM.  Your TPM manufacturer may have
       provided you with a set of credentials (certificates) that should be used when creating identities  using
       your  TPM.  When  a user of your TPM makes an identity, this credential will be encrypted as part of that
       process. See the 1.1b TPM Main specification section 9.3 for information on this process.

       endorsement_cred Path to the endorsement credential  for  your  TPM.   Your  TPM  manufacturer  may  have
       provided  you with a set of credentials (certificates) that should be used when creating identities using
       your TPM. When a user of your TPM makes an identity, this credential will be encrypted as  part  of  that
       process. See the 1.1b TPM Main specification section 9.3 for information on this process.

       remote_ops A list of TCS commands which will be allowed to be executed on this machine's TCSD by TSP's on
       non-local hosts (over the internet). By default, access to all operations is denied.

       host_platform_class Determines the TCG specification of the host's platform class. This refers to one  of
       the specifications contained in the TCG web site. The default is PC specification version 1.2 .

       all_platform_classes  Specifies  all  the  TCG  defined  platforms associated with the host platform. The
       host_platform_class must not be defined here. By  default,  all  platforms  but  the  host  platform  are
       associated.

EXAMPLE

              port = 30003
              num_threads = 10
              system_ps_file = /usr/local/var/tpm/system.data
              firmware_log_file = /proc/tpm/firmware_events
              kernel_log_file = /proc/tcg/measurement_events
              firmware_pcrs = 0,1,2,3,4,5,6,7
              kernel_pcrs = 10,11
              platform_cred = /usr/local/var/lib/tpm/platform.cert
              conformance_cred = /usr/local/var/lib/tpm/conformance.cert
              endorsement_cred = /usr/local/var/lib/tpm/endorsement.cert
              remote_ops = create_key,random
              host_platform_class = server_12
              all_platform_classes = pc_11,pc_12,mobile_12

SEE ALSO

       tcsd(8)

AUTHOR

       Kent Yoder

REPORTING BUGS

       Report bugs to <trousers-tech@lists.sf.net>