TrustedInfrastructure_Hosts_Hardware_Tpm_EndorsementKeys_PolicyPcrSpec

The EndorsementKeys.PolicyPcrSpec structure contains information that can be used to construct a PCR policy session for unsealing a secret using the EndorsementKeys.unseal operation.

JSON Example

{
    "pcrs": "string",
    "pcr_digest": "string"
}

string As binary

pcrs

Required

The PCRs to which the data is sealed. The PCR selection is a TPML_PCR_SELECTION structure.

Trusted Platform Module Library Part 2: Structures, Family "2.0", Level 00 Revision 01.59, November 8, 2019, Section 10.9.7 TPML_PCR_SELECTION

string As binary

pcr_digest

Optional

The digest of the PCRs selected in EndorsementKeys.PolicyPcrSpec.pcrs. The digest is a TPM2B_DIGEST structure.

Trusted Platform Module Library Part 2: Structures, Family "2.0", Level 00 Revision 01.59, November 8, 2019, Section 10.4.2 TPM2B_DIGEST

If unset, then the PCR digest is calculated by the service based on the current PCR state.