HIRS Provisioner

The HIRS Provisioner is a command-line application intended to work in conjunction with the HIRS Attestation Certificate Authority (ACA) and the Trusted Platform Module (TPM) located on the device.

This application “provisions” the TPM, meaning it sets up one or more TPM-based keys and corresponding certificates based upon interactions with the HIRS ACA. HIRS ACA policy dictates which keys are created on the TPM and what certificates are issued to the device by the HIRS ACA.

As part of this process, the Provisioner gathers device info from the client platform and sends this to the ACA. Device info includes the platform manufacturer and model, serial number, platform security attributes, a reference to the associated TPM, device component info, and more.

For setup details, refer to the Provisioner Installation section. For installation requirements, see the HIRS release page for OS- or distribution-specific packages.