From a1d85c9ee73af2d4ebc91fa8a5d06858ebf1b5f2 Mon Sep 17 00:00:00 2001 From: Stefan Berger Date: Thu, 11 Jun 2026 02:45:33 +0000 Subject: [PATCH] man: Document support for IAK and IDevID in swtpm_setup.conf Document support for IAK and IDevID via iakkeyalgo and idevidkeyalgo keywords in swtpm_setup.conf. Signed-off-by: Stefan Berger --- man/man5/swtpm_setup.conf.pod | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/man/man5/swtpm_setup.conf.pod b/man/man5/swtpm_setup.conf.pod index 96452bcb..6b871525 100644 --- a/man/man5/swtpm_setup.conf.pod +++ b/man/man5/swtpm_setup.conf.pod @@ -131,7 +131,16 @@ Note that rsa4096 requires the default-v2 or a later profile. This keyword is similar to B but applies to the 2nd endorsement key. The same choices are available. -=item B<> +=item B (since v0.11) + +This keyword allows to choose the default key algorithm of the IAK key. +Supported values are: ecc_nist_p256 or secp256r1, ecc_nist_p384 or secp384r1, +ecc_nist_p521 or secp521r1, rsa2048, rsa3072, and rsa4096. + +=item B (since v0.11) + +This keyword allows to choose the default key algorithm of the IDevID key. +Supported values are the same as for iakkeyalgo. =back