tpm2_nvdefine man page

tpm2_nvdefine(1) — define a TPM Non-Volatile (NV) index.


tpm2_nvdefine [Options]


tpm2_nvdefine(1) - Define NV index with given auth value.


Common Options

This collection of options are common to many programs and provide information that many users may expect.

This collection of environment variables that may be used to configure the various TCTI modules available.

The values passed through these variables can be overridden on a per-command basis using the available command line options, see the TCTI_OPTIONS section.

The variables respected depend on how the software was configured.

Tcti Options

This collection of options are used to configure the varous TCTI modules available. They override any environment variables.

NV Attributes

NV Attributes are used to control various properties of the NV defined space. When specified as an option, either the raw bitfield mask or “nice-names” may be used. The values can be found in Table 204 Part 2 of the TPM2.0 specification, which can be found here:


Nice names are calculated by taking the name field of table 204 and removing the prefix TPMA_NV_ and lowercasing the result. Thus, TPMA_NV_PPWRITE becomes ppwrite. Nice names can be joined using the bitwise or “|” symbol.

Note that the TPM_NT field is 4 bits wide, and thus can be set via nt= format. For instance, to set The fields TPMA_NV_OWNERREAD, TPMA_NV_OWNERWRITE, TPMA_NV_POLICYWRITE, and TPMA_NT = 0x3, the argument would be:

ownerread|ownerwrite|policywrite|nt=0x3 # Password Formatting

Passwords are interpreted in two forms, string and hex-string. A string password is not interpreted, and is directly used for authorization. A hex-string, is converted from a hexidecimal form into a byte array form, thus allowing passwords with non-printable and/or terminal un-friendly characters.

By default passwords are assumed to be in the string form. Password form is specified with special prefix values, they are:


tpm2_nvdefine -x 0x1500016 -a 0x40000001 -s 32 -t 0x2000A
tpm2_nvdefine -x 0x1500016 -a 0x40000001 -s 32 -t ownerread|ownerwrite|policywrite -I 1a1b1c


0 on success or 1 on failure.


Github Issues (


See the Mailing List (

Referenced By


SEPTEMBER 2017 tpm2-tools General Commands Manual