ISO/IEC INTERNATIONAL STANDARD 11889-3 Second edition 2015-12-15 Information technology Trusted Platform Module Library - Part 3: Commands Technologies de I'information - Bibliotheque de module de plate-forme de confiance - Partie 3: Commandes Reference number IS0/IEC 11889-3:2015(E) IEC International Organization for Standardization Provinicial Academy of Standardization 5944055 @IS0/IEC2015 Not for Resale, ted without license from IHS IS0/IEC 11889-3:2015(E) COPYRIGHTPROTECTEDDOCUMENT IS0/IEC 2015, Published in Switzerland All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below or ISO's member body in the country of the requester. ISO copyrightoffice Ch. de Blandonnet 8 . CP 401 CH-1214 Vernier, Geneva, Switzerland Tel. +41 22 749 01 11 Fax +41 22 749 09 47 [email protected] www.iso.org PrganizationforStandardization icensee-Guangdong Provinicial Acad ISSta/JFdzano J.4as:All rights reserved Not for Resale, 2016/3/4 03:28:03 etworking permitted without license from IHS ISO/IEC 11889-3:2015(E) CONTENTS Foreword.... Introduction Scope 2 Normative references.... 3 Terms and Definitions . 4 Symbols and abbreviated terms. 5 Notation 2 5.1 Introduction.. 5.2 Table Decorations.... 5.3 Handle and Parameter Demarcation . 5.4 AuthorizationSize and ParameterSize. 6 Command Processing. 6.1 Introduction.... 6.2 Command Header Validation... 6.3 Mode Checks. 6.4 Handle Area Validation.. 6.5 Session Area Validation.. 6.6 Authorization Checks .. 6.7 Parameter Decryption... 6.8 Parameter Unmarshaling.. 10 6.8.1 Introduction... 6.8.2 Unmarshaling Errors . 10 6.9 Command Post Processing 7 Response Values 13 7.1 Tag. 7.2 Response Codes. 13 8 Implementation Dependent . 16 9 Detailed Actions Assumptions 17 9.1 Introduction 9.2 Pre-processing... 9.3 Post Processing .... 10 Start-up. 18 10.1 Introduction. 10.2 _TPM_Init.. .18 10.2.1 General Description. 18 10.2.2 Detailed Actions 19 10.3 TPM2_Startup. 20 10.3.1 General Description... 10.3.2 Command and Response... 23 10.3.3 Detailed Actions 10.4TPM2_Shutdown 27 10.4.1 General Description Intemational organizatin t@std@AEC 2015 - All rights reserved ili esale No reprodu ed without license from IHS ISO/IEC 11889-3:2015(E) 10.4.2 Command and Response... ....28 10.4.3 Detailed Actions 11Testing .31 11.1 Introduction 31 11.2 TPM2_SelfTest. 11.2.1 General Description.. .32 11.2.2 Command and Response.. 11.2.3 Detailed Actions ... 11.3TPM2_IncrementalSelfTest 11.3.1 General Description.. ..35 11.3.2 Command and Response.. ..36 11.3.3 Detailed Actions . 11.4 TPM2_GetTestResult.. ..38 11.4.1 General Description.. ..38 11.4.2 Command and Response... ..39 11.4.3 Detailed Actions 12 Session Commands. 41 12.1 TPM2_StartAuthSession . 41 12.1.1 General Description.. 12.1.2 Command and Response... 43 12.1.3 Detailed Actions . 12.2 TPM2_PolicyRestart. 46 12.2.1 General Description.. 12.2.2 Command and Response... 47 12.2.3 Detailed Actions .48 13 Object Commands.. ...49 13.1 TPM2_Create.. 13.1.1 General Description... 13.1.2 Command and Response.... 13.1.3 Detailed Actions . ..53 13.2TPM2_Load 13.2.1 General Description.. ..55 13.2.2 Command and Response... 13.2.3 Detailed Actions ..57 13.3 TPM2_LoadExternal. 13.3.1 General Description.. ..59 13.3.2 Command and Response..... 13.3.3 Detailed Actions . .. 62 13.4TPM2_ReadPublic 13.4.1 GeneralDescription ...64 13.4.2 Command and Response.... International Organization f4tand: Nan@EGa2015n5Al1 rights reserved No reprodu ISO/IEC11889-3:2015(E) 13.4.3 Detailed Actions .66 13.5TPM2_ActivateCredential. ..67 13.5.1 General Description.. 13.5.2 Command and Response... .68 13.5.3 Detailed Actions . .69 13.6 TPM2_MakeCredential 13.6.1 General Description. 13.6.2 Command and Response... 13.6.3 Deta