Index: man/man5/tcsd.conf.5 |
diff --git a/man/man5/tcsd.conf.5 b/man/man5/tcsd.conf.5 |
new file mode 100644 |
index 0000000000000000000000000000000000000000..52284c5420e1fb8cf5626e27c23112ce576e15c6 |
--- /dev/null |
+++ b/man/man5/tcsd.conf.5 |
@@ -0,0 +1,129 @@ |
+.\" Copyright (C) 2005 International Business Machines Corporation |
+.\" |
+.de Sh \" Subsection |
+.br |
+.if t .Sp |
+.ne 5 |
+.PP |
+\fB\\$1\fR |
+.PP |
+.. |
+.de Sp \" Vertical space (when we can't use .PP) |
+.if t .sp .5v |
+.if n .sp |
+.. |
+.de Ip \" List item |
+.br |
+.ie \\n(.$>=3 .ne \\$3 |
+.el .ne 3 |
+.IP "\\$1" \\$2 |
+.. |
+.TH "tcsd.conf" 5 "2006-07-14" "TSS 1.1" |
+.ce 1 |
+TCG Software Stack |
+.SH NAME |
+tcsd.conf \- configuration file for the trousers TCS daemon. |
+.SH "DESCRIPTION" |
+.PP |
+This file, by default |
+.IR /etc/tcsd.conf |
+is read by the trousers TCSD daemon, tcsd (see tcsd(8)). The tcsd.conf file |
+that is installed by trousers contains all the default options, commented out. |
+.SH "OPTIONS" |
+.PP |
+.BI port |
+The port that TCSD will listen on for connections, local and remote, from |
+applications. |
+ |
+.BI num_threads |
+The maximum number of threads that the TCSD will spawn simultaneously to service |
+applications. After |
+.BI num_threads |
+threads have been spawned, any application that attempts to connect to the TCSD |
+will receive an error. |
+ |
+.BI system_ps_file |
+The location of the system persistent storage file. The system persistent |
+storage file holds keys and data across restarts of the TCSD and system |
+reboots. |
+ |
+.BI firmware_log_file |
+Path to the file containing the current firmware PCR event log data. The |
+interface to this log is usually provided by the TPM device driver. |
+ |
+.BI kernel_log_file |
+Path to the file containing the current kernel PCR event log data. By default, |
+this data will be parsed in the format provided by the Integrity Measurement |
+Architecture LSM. |
+ |
+.BI firmware_pcrs |
+A list of PCR indices that are manipulated only by the system firmware and |
+therefore are not extended or logged by the TCSD. Applications that call |
+Tcsi_PcrExtend on PCRs listed here will receive an error. |
+ |
+.BI kernel_pcrs |
+A list of PCR indices that are manipulated only by the kernel and therefore |
+are not extended or logged by the TCSD. Applications that call Tcsi_PcrExtend |
+on PCRs listed here will receive an error. |
+ |
+.BI platform_cred |
+Path to the platform credential for your TPM. Your TPM manufacturer may have |
+provided you with a set of credentials (certificates) that should be used when |
+creating identities using your TPM. When a user of your TPM makes an identity, |
+this credential will be encrypted as part of that process. See the 1.1b TPM Main |
+specification section 9.3 for information on this process. |
+ |
+.BI conformance_cred |
+Path to the conformance credential for your TPM. Your TPM manufacturer may have |
+provided you with a set of credentials (certificates) that should be used when |
+creating identities using your TPM. When a user of your TPM makes an identity, |
+this credential will be encrypted as part of that process. See the 1.1b TPM Main |
+specification section 9.3 for information on this process. |
+ |
+.BI endorsement_cred |
+Path to the endorsement credential for your TPM. Your TPM manufacturer may have |
+provided you with a set of credentials (certificates) that should be used when |
+creating identities using your TPM. When a user of your TPM makes an identity, |
+this credential will be encrypted as part of that process. See the 1.1b TPM Main |
+specification section 9.3 for information on this process. |
+ |
+.BI remote_ops |
+A list of TCS commands which will be allowed to be executed on this machine's |
+TCSD by TSP's on non-local hosts (over the internet). By default, access to all |
+operations is denied. |
+ |
+.BI host_platform_class |
+Determines the TCG specification of the host's platform class. This refers to |
+one of the specifications contained in the TCG web site. The default is PC |
+specification version 1.2 . |
+ |
+.BI all_platform_classes |
+Specifies all the TCG defined platforms associated with the host platform. The |
+host_platform_class must not be defined here. By default, all platforms but |
+the host platform are associated. |
+ |
+.SH "EXAMPLE" |
+.PP |
+.IP |
+.nf |
+port = 30003 |
+num_threads = 10 |
+system_ps_file = /usr/local/var/tpm/system.data |
+firmware_log_file = /proc/tpm/firmware_events |
+kernel_log_file = /proc/tcg/measurement_events |
+firmware_pcrs = 0,1,2,3,4,5,6,7 |
+kernel_pcrs = 10,11 |
+platform_cred = /usr/local/var/lib/tpm/platform.cert |
+conformance_cred = /usr/local/var/lib/tpm/conformance.cert |
+endorsement_cred = /usr/local/var/lib/tpm/endorsement.cert |
+remote_ops = create_key,random |
+host_platform_class = server_12 |
+all_platform_classes = pc_11,pc_12,mobile_12 |
+.fi |
+.SH "SEE ALSO" |
+.PP |
+\fBtcsd\fR(8) |
+.SH "AUTHOR" |
+Kent Yoder |
+.SH "REPORTING BUGS" |
+Report bugs to <trousers-tech@lists.sf.net> |