| Index: man/man5/tcsd.conf.5
|
| diff --git a/man/man5/tcsd.conf.5 b/man/man5/tcsd.conf.5
|
| new file mode 100644
|
| index 0000000000000000000000000000000000000000..52284c5420e1fb8cf5626e27c23112ce576e15c6
|
| --- /dev/null
|
| +++ b/man/man5/tcsd.conf.5
|
| @@ -0,0 +1,129 @@
|
| +.\" Copyright (C) 2005 International Business Machines Corporation
|
| +.\"
|
| +.de Sh \" Subsection
|
| +.br
|
| +.if t .Sp
|
| +.ne 5
|
| +.PP
|
| +\fB\\$1\fR
|
| +.PP
|
| +..
|
| +.de Sp \" Vertical space (when we can't use .PP)
|
| +.if t .sp .5v
|
| +.if n .sp
|
| +..
|
| +.de Ip \" List item
|
| +.br
|
| +.ie \\n(.$>=3 .ne \\$3
|
| +.el .ne 3
|
| +.IP "\\$1" \\$2
|
| +..
|
| +.TH "tcsd.conf" 5 "2006-07-14" "TSS 1.1"
|
| +.ce 1
|
| +TCG Software Stack
|
| +.SH NAME
|
| +tcsd.conf \- configuration file for the trousers TCS daemon.
|
| +.SH "DESCRIPTION"
|
| +.PP
|
| +This file, by default
|
| +.IR /etc/tcsd.conf
|
| +is read by the trousers TCSD daemon, tcsd (see tcsd(8)). The tcsd.conf file
|
| +that is installed by trousers contains all the default options, commented out.
|
| +.SH "OPTIONS"
|
| +.PP
|
| +.BI port
|
| +The port that TCSD will listen on for connections, local and remote, from
|
| +applications.
|
| +
|
| +.BI num_threads
|
| +The maximum number of threads that the TCSD will spawn simultaneously to service
|
| +applications. After
|
| +.BI num_threads
|
| +threads have been spawned, any application that attempts to connect to the TCSD
|
| +will receive an error.
|
| +
|
| +.BI system_ps_file
|
| +The location of the system persistent storage file. The system persistent
|
| +storage file holds keys and data across restarts of the TCSD and system
|
| +reboots.
|
| +
|
| +.BI firmware_log_file
|
| +Path to the file containing the current firmware PCR event log data. The
|
| +interface to this log is usually provided by the TPM device driver.
|
| +
|
| +.BI kernel_log_file
|
| +Path to the file containing the current kernel PCR event log data. By default,
|
| +this data will be parsed in the format provided by the Integrity Measurement
|
| +Architecture LSM.
|
| +
|
| +.BI firmware_pcrs
|
| +A list of PCR indices that are manipulated only by the system firmware and
|
| +therefore are not extended or logged by the TCSD. Applications that call
|
| +Tcsi_PcrExtend on PCRs listed here will receive an error.
|
| +
|
| +.BI kernel_pcrs
|
| +A list of PCR indices that are manipulated only by the kernel and therefore
|
| +are not extended or logged by the TCSD. Applications that call Tcsi_PcrExtend
|
| +on PCRs listed here will receive an error.
|
| +
|
| +.BI platform_cred
|
| +Path to the platform credential for your TPM. Your TPM manufacturer may have
|
| +provided you with a set of credentials (certificates) that should be used when
|
| +creating identities using your TPM. When a user of your TPM makes an identity,
|
| +this credential will be encrypted as part of that process. See the 1.1b TPM Main
|
| +specification section 9.3 for information on this process.
|
| +
|
| +.BI conformance_cred
|
| +Path to the conformance credential for your TPM. Your TPM manufacturer may have
|
| +provided you with a set of credentials (certificates) that should be used when
|
| +creating identities using your TPM. When a user of your TPM makes an identity,
|
| +this credential will be encrypted as part of that process. See the 1.1b TPM Main
|
| +specification section 9.3 for information on this process.
|
| +
|
| +.BI endorsement_cred
|
| +Path to the endorsement credential for your TPM. Your TPM manufacturer may have
|
| +provided you with a set of credentials (certificates) that should be used when
|
| +creating identities using your TPM. When a user of your TPM makes an identity,
|
| +this credential will be encrypted as part of that process. See the 1.1b TPM Main
|
| +specification section 9.3 for information on this process.
|
| +
|
| +.BI remote_ops
|
| +A list of TCS commands which will be allowed to be executed on this machine's
|
| +TCSD by TSP's on non-local hosts (over the internet). By default, access to all
|
| +operations is denied.
|
| +
|
| +.BI host_platform_class
|
| +Determines the TCG specification of the host's platform class. This refers to
|
| +one of the specifications contained in the TCG web site. The default is PC
|
| +specification version 1.2 .
|
| +
|
| +.BI all_platform_classes
|
| +Specifies all the TCG defined platforms associated with the host platform. The
|
| +host_platform_class must not be defined here. By default, all platforms but
|
| +the host platform are associated.
|
| +
|
| +.SH "EXAMPLE"
|
| +.PP
|
| +.IP
|
| +.nf
|
| +port = 30003
|
| +num_threads = 10
|
| +system_ps_file = /usr/local/var/tpm/system.data
|
| +firmware_log_file = /proc/tpm/firmware_events
|
| +kernel_log_file = /proc/tcg/measurement_events
|
| +firmware_pcrs = 0,1,2,3,4,5,6,7
|
| +kernel_pcrs = 10,11
|
| +platform_cred = /usr/local/var/lib/tpm/platform.cert
|
| +conformance_cred = /usr/local/var/lib/tpm/conformance.cert
|
| +endorsement_cred = /usr/local/var/lib/tpm/endorsement.cert
|
| +remote_ops = create_key,random
|
| +host_platform_class = server_12
|
| +all_platform_classes = pc_11,pc_12,mobile_12
|
| +.fi
|
| +.SH "SEE ALSO"
|
| +.PP
|
| +\fBtcsd\fR(8)
|
| +.SH "AUTHOR"
|
| +Kent Yoder
|
| +.SH "REPORTING BUGS"
|
| +Report bugs to <trousers-tech@lists.sf.net>
|
|
|