CREATEEKCERT(1)

NAME
createekcert - Runs TPM createekcert

DESCRIPTION
createekcert

Provisions an EK certificate E.g.,

createekcert -cakey cakey.pem -capwd rrrr -ip ekpub.bin

[-pwdo
    owner password (default zeros)]

-iek
    TPM_PUBKEY EK file name

-cakey
    CA PEM key file name

[-capwd
    CA PEM key password (default empty)]

[-of
    DER certificate output file name]

Currently:

    Certificate issuer, subject, and validity are hard coded.