Re: Seal/Unseal trusted keys against PCR policy

[Ken Goldman <kgold@xxxxxxxxxxxxx>]

I discourage anyone from using scripted command line tools as production 
code.  IMHO, they're fine for learning and prototyping but that's all.

On 1/6/2023 5:23 PM, William Roberts wrote:
> If you need to do this in production that tpmproxy allows anyone to
> connect to it. So while it's open it
> would circumvent the permissions on /dev/tpmrm0. You can just use
> tpm2-tools, which uses
> contexts and avoids this problem.