man: Document support for IAK and IDevID in swtpm_setup.conf

Document support for IAK and IDevID via iakkeyalgo and idevidkeyalgo
keywords in swtpm_setup.conf.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
This commit is contained in:
Stefan Berger 2026-06-11 02:45:33 +00:00 committed by Stefan Berger
parent 8356e28a4e
commit a1d85c9ee7

View File

@ -131,7 +131,16 @@ Note that rsa4096 requires the default-v2 or a later profile.
This keyword is similar to B<ek1keyalgo> but applies to the 2nd endorsement
key. The same choices are available.
=item B<>
=item B<iakkeyalgo> (since v0.11)
This keyword allows to choose the default key algorithm of the IAK key.
Supported values are: ecc_nist_p256 or secp256r1, ecc_nist_p384 or secp384r1,
ecc_nist_p521 or secp521r1, rsa2048, rsa3072, and rsa4096.
=item B<idevidkeyalgo> (since v0.11)
This keyword allows to choose the default key algorithm of the IDevID key.
Supported values are the same as for iakkeyalgo.
=back