ptsc Command
Purpose
Collects information from a trusted platform module (TPM) in preparation for an attestation request from an openpts verifier.
Syntax
Description
The ptsc command is the openpts collector. The command is used to gather measurements and events from the TPM (through the tscd interface), construct reference manifests (RMs) and convey them when requested to the openpts verifier. When a system is first configured for trusted boot, the collector must be initialized by using the -i option. This option generates a UUID and an associated RM stored in the /var/ptsc/<UUID>/rm0.xml file. If the system is changed and a new RM is required, the -u option is used and the verifier must be reinitialized.
Flags
Item | Description |
---|---|
Commands | |
-i | Initializes the openpts collector. |
-s | Specifies the startup (both self-test and the timestamp). |
-t | Indicates the self-test. |
-u | Updates the RM. |
-U | Updates the RM automatically. |
-D | Displays the configuration settings of the target or ALL the options. This is the default setting. |
-m | If -M mode |
Options | |
-c configfile | Changes the location of the configuration file. The default is /etc/ptsc.conf. |
-P name=value | Sets the properties. |
-R | Removes the RM. |
-Z | Uses an SRK secret of all zeros. |
Miscellaneous | |
-h | Displays the command usage information. |
-V | Displays the information in verbose mode. Multiple -V options increase the verbosity and is used for debugging. |
Files
Item | Description |
---|---|
/etc/ptsc.conf | The configuration file. This is the default location of the configuration file. |
/var/ptsc/rm-uuid | The UUID of the current RM. |
/var/ptsc/uuid | The UUID of the collector. |
/var/ptsc/<UUID>/rm0.xml | The reference manifest. |