< Back

Import-TpmOwnerAuth

Wed Jan 30, 2019 6:04 pm

NAME Import-TpmOwnerAuth



SYNOPSIS

Imports a TPM owner authorization value to the registry.





SYNTAX

Import-TpmOwnerAuth -File <String> [<CommonParameters>]



Import-TpmOwnerAuth [-OwnerAuthorization] <String> [<CommonParameters>]





DESCRIPTION

The Import-TpmOwnerAuth cmdlet imports a valid Trusted Platform Module (TPM) owner authorization value to the registry.



For more information on TPM, see the Trusted Platform Module Technology Overview (http://technet.microsoft.com/en-us/libr ... 31725.aspx) in the

Technet library.





PARAMETERS

-File <String>

Specifies a file that contains the current owner authorization value for the TPM. You can use the TPM Management Console to create this file.



Required? true

Position? named

Default value none

Accept pipeline input? false

Accept wildcard characters? false



-OwnerAuthorization <String>

Specifies the current owner authorization value for the TPM.



Required? true

Position? 2

Default value none

Accept pipeline input? true (ByValue)

Accept wildcard characters? false



<CommonParameters>

This cmdlet supports the common parameters: Verbose, Debug,

ErrorAction, ErrorVariable, WarningAction, WarningVariable,

OutBuffer, PipelineVariable, and OutVariable. For more information, see

about_CommonParameters (https:/go.microsoft.com/fwlink/?LinkID=113216).



INPUTS

String



Specifies the owner authorization value for the TPM.





OUTPUTS

TpmObject



This cmdlet returns a TpmObject object that contains the following information:



-- TpmReady. Whether a TPM complies with Windows Server???? 2012 standards.

-- TpmPresent. Whether there is a TMP on the current computer.

-- ManagedAuthLevel. The level at which the operating system manages the owner authorization. Possible values are Legacy, Balanced, and Full.

-- OwnerClearDisabled. Whether TPM can be reset. If this value is True, the TPM cannot be reset through the operating system by using the owner

authorization value. If this value is False, the TPM can be reset through the operating system.

-- AutoProvisioning. Whether the computer can use auto-provisioning. Possible values are NotDefined, Enabled, Disabled, and DisabledForNextBoot.

-- LockedOut. Whether a TPM is locked out.

-- SelfTest. Information returned by a test that TPM runs.





Example 1: Import an owner authorization value



PS C:\\> Import-TpmOwnerAuth -OwnerAuthorization "Qn2sdCFQmvjf+tBtSWH4GT87sQs="

TpmReady : False

TpmPresent : True

ManagedAuthLevel : Full

OwnerAuth : Qn2sdCFQmvjf+tBtSWH4GT87sQs=

OwnerClearDisabled : True

AutoProvisioning : DisabledForNextBoot

LockedOut : False

SelfTest : {191, 191, 245, 191...}



This command imports the specified owner authorization value to the registry.





Example 2: Import an owner authorization value from a file



PS C:\\> Import-TpmOwnerAuth -File "OwnAuthFile.tpm"

TpmReady : False

TpmPresent : True

ManagedAuthLevel : Full

OwnerAuth : OwnerClearDisabled : True

AutoProvisioning : DisabledForNextBoot

LockedOut : False

SelfTest : {191, 191, 245, 191...}



This command imports the owner authorization value in the specified file to the registry.







RELATED LINKS

Online Version:

ConvertTo-TpmOwnerAuth

Set-TpmOwnerAuth