.\" Copyright (C) 2007 International Business Machines Corporation
.\"
.de Sh \" Subsection
.br
.if t .Sp
.ne 5
.PP
\fB\\$1\fR
.PP
..
.de Sp \" Vertical space (when we can't use .PP)
.if t .sp .5v
.if n .sp
..
.de Ip \" List item
.br
.ie \\n(.$>=3 .ne \\$3
.el .ne 3
.IP "\\$1" \\$2
..
.TH "tpm_revokeek" 8 "2007-10-22"  "TPM Management"
.ce 1
TPM Management - tpm_revokeek 
.SH NAME
tpm_revokeek \- revokes the Endorsement Key Pair of the TPM
.SH "SYNOPSIS"
.ad l
.hy 0
.B tpm_revokeek
.RB [ OPTION ]

.SH "DESCRIPTION"
.PP
\fBtpm_revokeek\fR clears the TPM revocable Endorsement Key Pair   
(via the TPM_RevokeEndorsementKey API). This command erases all counters (except the base one), erases the
Ek, the SRK, the owner auth and any NVRAM locked to the owner auth. It does not
touch the delegation tables or other NVRAM. 

.TP
\fB\-h\fR, \fB\-\-help\fR
Display command usage info.
.TP
\fB-v\fR, \fB\-\-version\fR
Display command version info.
.TP
\fB-l\fR, \fB\-\-log\fR [none|error|info|debug]
Set logging level.
\.TP
\fB-i\fR, \fB\-\-infile\fR [input file]
Specifies the file that contains the authorization information required to revoke the Ek (secret data generated during the revocable Ek creation process). Only the first 20 bytes of this file are used and the remaining ones are ignored.

.SH "SEE ALSO"
.PP
\fBtpm_version\fR(1), \fBtpm_createek\fR(8), \fBtpm_getpubek\fR(8), \fBtcsd\fR(8)

.SH "REPORTING BUGS"
Report bugs to <trousers-users@lists.sourceforge.net>