Go to main content

man pages section 5: File Formats

Exit Print View

Updated: Wednesday, July 27, 2022
 
 

tcsd.conf (5)

Name

tcsd.conf - configuration file for the trousers TCS daemon.

Synopsis

Please see following description for synopsis

Description

tcsd.conf(5)                  File Formats Manual                 tcsd.conf(5)



                              TCG Software Stack

NAME
       tcsd.conf - configuration file for the trousers TCS daemon.

DESCRIPTION
       This  file,  by default /etc/security/tcsd.conf is read by the trousers
       TCSD daemon, tcsd (see tcsd(8)). The tcsd.conf file that  is  installed
       by trousers contains all the default options, commented out.

OPTIONS
       port  The  TCP port that TCSD will listen on for connections, local and
       remote,  from  applications.   If  0,  TCSD  uses  UNIX  Domain  socket
       /var/tpm/tcsd-socket, otherwise TCSD uses the TCP port specified (30003
       is the traditional tcsd TCP port).  If using a TCP Port (that is,  port
       is not 0), clients such as tpmadm must set the port with shell environ-
       ment variable TSS_TCSD_PORT. For example,
       export TSS_TCSD_PORT=30003

       num_threads The maximum number of threads  that  the  TCSD  will  spawn
       simultaneously  to service applications. After num_threads threads have
       been spawned, any application that attempts to connect to the TCSD will
       receive an error.

       system_ps_file  The location of the system persistent storage file. The
       system persistent storage file holds keys and data across  restarts  of
       the TCSD and system reboots.

       firmware_log_file  Path to the file containing the current firmware PCR
       event log data. The interface to this log is usually  provided  by  the
       TPM device driver.

       kernel_log_file  Path  to  the  file  containing the current kernel PCR
       event log data. By default, this data will be parsed in the format pro-
       vided by the Integrity Measurement Architecture LSM.

       firmware_pcrs  A  list  of PCR indices that are manipulated only by the
       system firmware and therefore are not extended or logged by  the  TCSD.
       Applications  that call Tcsi_PcrExtend on PCRs listed here will receive
       an error.

       kernel_pcrs A list of PCR indices that are manipulated only by the ker-
       nel  and therefore are not extended or logged by the TCSD. Applications
       that call Tcsi_PcrExtend on PCRs listed here will receive an error.

       platform_cred Path to the platform credential for your TPM.   Your  TPM
       manufacturer  may have provided you with a set of credentials (certifi-
       cates) that should be used when creating  identities  using  your  TPM.
       When  a  user  of  your  TPM makes an identity, this credential will be
       encrypted as part of that process. See the 1.1b TPM Main  specification
       section 9.3 for information on this process.

       conformance_cred Path to the conformance credential for your TPM.  Your
       TPM manufacturer may have provided you with a set of credentials  (cer-
       tificates) that should be used when creating identities using your TPM.
       When a user of your TPM makes an  identity,  this  credential  will  be
       encrypted  as part of that process. See the 1.1b TPM Main specification
       section 9.3 for information on this process.

       endorsement_cred Path to the endorsement credential for your TPM.  Your
       TPM  manufacturer may have provided you with a set of credentials (cer-
       tificates) that should be used when creating identities using your TPM.
       When  a  user  of  your  TPM makes an identity, this credential will be
       encrypted as part of that process. See the 1.1b TPM Main  specification
       section 9.3 for information on this process.

       remote_ops  A list of TCS commands which will be allowed to be executed
       on this machine's TCSD by TSP's on non-local hosts (over the internet).
       By default, access to all operations is denied.

       host_platform_class  Determines  the  TCG  specification  of the host's
       platform class. This refers to one of the specifications  contained  in
       the TCG web site. The default is PC specification version 1.2 .

       all_platform_classes Specifies all the TCG defined platforms associated
       with the host platform. The host_platform_class  must  not  be  defined
       here. By default, all platforms but the host platform are associated.


EXAMPLE
              port = 0
              num_threads = 10
              system_ps_file = /usr/local/var/tpm/system.data
              firmware_log_file = /proc/tpm/firmware_events
              kernel_log_file = /proc/tcg/measurement_events
              firmware_pcrs = 0,1,2,3,4,5,6,7
              kernel_pcrs = 10,11
              platform_cred = /usr/local/var/lib/tpm/platform.cert
              conformance_cred = /usr/local/var/lib/tpm/conformance.cert
              endorsement_cred = /usr/local/var/lib/tpm/endorsement.cert
              remote_ops = create_key,random
              host_platform_class = server_12
              all_platform_classes = pc_11,pc_12,mobile_12


ATTRIBUTES
       See attributes(7) for descriptions of the following attributes:


       +---------------+---------------------------+
       |ATTRIBUTE TYPE |     ATTRIBUTE VALUE       |
       +---------------+---------------------------+
       |Availability   | library/security/trousers |
       +---------------+---------------------------+
       |Stability      | Uncommitted               |
       +---------------+---------------------------+

SEE ALSO
       tcsd(8)

AUTHOR
       Kent Yoder

REPORTING BUGS
       Report bugs to <trousers-tech@lists.sf.net>



NOTES
       Source  code  for open source software components in Oracle Solaris can
       be found at https://www.oracle.com/downloads/opensource/solaris-source-
       code-downloads.html.

       This     software     was    built    from    source    available    at
       https://github.com/oracle/solaris-userland.   The  original   community
       source        was        downloaded        from         https://source-
       forge.net/projects/trousers/files/trousers/0.3.15/trousers-0.3.15.tar.gz.

       Further information about this software can be found on the open source
       community website at http://trousers.sourceforge.net/.



TSS 1.1                           2006-07-14                      tcsd.conf(5)