mirror of
https://github.com/linuxboot/heads.git
synced 2024-12-19 04:57:55 +00:00
15 lines
410 B
Plaintext
15 lines
410 B
Plaintext
|
#!/bin/bash
|
||
|
|
# Wipe the sealed TOTP/HOTP secret. The secret is overwritten with all-0,
|
||
|
|
# rather than deleted, because deletion requires authorization. Wiping the
|
||
|
|
# secret will cause the next boot to prompt to regenerate the secret.
|
||
|
|
|
||
|
|
. /etc/functions
|
||
|
|
|
||
|
|
TPM_NVRAM_SPACE=4d47
|
||
|
|
TPM_SIZE=312
|
||
|
|
|
||
|
|
if [ "$CONFIG_TPM" = "y" ]; then
|
||
|
|
tpmr destroy "$TPM_NVRAM_SPACE" "$TPM_SIZE" \
|
||
|
|
|| die "Unable to wipe sealed secret"
|
||
|
|
fi
|