PCR Bank Specifiers

PCR Bank Selection lists follow the below specification:

<BANK>:<PCR>[,<PCR>] or <BANK>:all

multiple banks may be separated by '+'.

For example:

sha1:3,4+sha256:all

will select PCRs 3 and 4 from the SHA1 bank and PCRs 0 to 23 from the SHA256 bank.

Certain commands support specifying forward sealing values as well:

sha1:0,1=da39a3ee5e6b4b0d3255bfef95601890afd80709,2

This will select the current values for PCRs 0 and 2, but use the specified value for PCR 1. Digest lengths must match the bank size. An optional 0x prefix will be stripped off.

Note

PCR Selections allow for up to 5 hash to pcr selection mappings. This is a limitation in design in the single call to the tpm to get the pcr values.