Skip to content

Commit 373294a

Browse files
authored
Merge pull request #2055 from tlaurion/tpmr-change_policypassword_with_policyauthvalue
tpmr: change TPM DUK from policypassword for policyauthvalue
2 parents 8644650 + b5719a6 commit 373294a

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

initrd/bin/tpmr

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -463,7 +463,7 @@ tpm2_seal() {
463463
# Add an object authorization policy (the object authorization
464464
# will be the password). Save the digest, this is the resulting
465465
# policy.
466-
tpm2 policypassword -Q -S "$TRIAL_SESSION" -L "$AUTH_POLICY"
466+
tpm2 policyauthvalue -Q -S "$TRIAL_SESSION" -L "$AUTH_POLICY"
467467
# Pass the password to create later. Pass the sha256sum of the
468468
# password to the TPM so the password is not limited to 32 chars
469469
# in length.
@@ -605,7 +605,7 @@ tpm2_unseal() {
605605
# Add the object authorization policy (the actual password is
606606
# provided later, but we must include this so the policy we
607607
# attempt to use is correct).
608-
tpm2 policypassword -Q -S "$POLICY_SESSION"
608+
tpm2 policyauthvalue -Q -S "$POLICY_SESSION"
609609
# When unsealing, include the password with the auth session
610610
UNSEAL_PASS_SUFFIX="+$(tpm2_password_hex "$pass")"
611611
fi

0 commit comments

Comments
 (0)