« first day 

3:40 AM
thank you, that helps. Also once the script does the setup, im planning to also lock the tpm so it cannot be changed later. I understand this is not reversible but probably gives the best security
 
 
17 hours later…
8:17 PM
actually when we run tpm2_load -C /primary.ctx -u /key.pub -c /key.ctx - i get error as it expects -R with private key
if we are creating the keys in tpm with tpm2_create, do we have to also do tpm2_load ?
 

« first day