1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
|
% tpm2_pcrread(1) tpm2-tools | General Commands Manual
# NAME
**tpm2_pcrread**(1) - List PCR values.
# SYNOPSIS
**tpm2_pcrread** [*OPTIONS*] _PCR\_LIST\_OR\_ALG_
# DESCRIPTION
**tpm2_pcrread**(1) - Displays PCR values. Without any arguments, **tpm2_pcrread**(1)
outputs all PCRs and their hash banks. One can use specify the hash algorithm or
a pcr list as an argument to filter the output.
To only output PCR banks with a given algorithm, specify the hashing algorithm
as the argument. Algorithms should follow the "formatting standards", see section
"Algorithm Specifiers". Also, see section "Supported Hash Algorithms" for a list
of supported hash algorithms.
To output a list of PCR banks (sha1, sha256, etc) and ids (0, 1, 2 etc) specify
a PCR selection list as the argument as specified via section "PCR Bank
Specifiers".
Also read **NOTES** section below.
Output is written in a YAML format to stdout, with each algorithm followed by
a PCR index and its value. As a simple example assume just sha1 and sha256
support and only 1 PCR. The output would be:
```
$ tpm2_pcrread sha1:0+sha256:0
sha1 :
0 : 0000000000000000000000000000000000000003
sha256 :
0 : 0000000000000000000000000000000000000000000000000000000000000003
```
# OPTIONS
* **-o**, **\--output**=_FILE_:
The output file to write the PCR values in binary format, optional.
[common options](common/options.md)
[common tcti options](common/tcti.md)
[PCR bank specifiers](common/pcr.md)
[supported hash algorithms](common/hash.md)
[algorithm specifiers](common/alg.md)
# EXAMPLES
## Display all PCR values
```bash
tpm2_pcrread
```
## Display the PCR values with a specified bank
```bash
tpm2_pcrread sha1
```
## Display the PCR values with specified banks and store in a file
```bash
tpm2_pcrread -o pcrs sha1:16,17,18+sha256:16,17,18
```
## Display the supported PCR bank algorithms and exit
```bash
tpm2_pcrread
```
# NOTES
The maximum number of PCR that can be dumped at once is associated
with the maximum length of a bank.
On most TPMs, it means that this tool can dump up to 24 PCRs
at once.
[returns](common/returns.md)
[footer](common/footer.md)
|