man: Document support for IAK and IDevID in swtpm_setup.conf Document support for IAK and IDevID via iakkeyalgo and idevidkeyalgo keywords in swtpm_setup.conf. Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
diff --git a/man/man5/swtpm_setup.conf.pod b/man/man5/swtpm_setup.conf.pod index 96452bc..6b87152 100644 --- a/man/man5/swtpm_setup.conf.pod +++ b/man/man5/swtpm_setup.conf.pod
@@ -131,7 +131,16 @@ This keyword is similar to B<ek1keyalgo> but applies to the 2nd endorsement key. The same choices are available. -=item B<> +=item B<iakkeyalgo> (since v0.11) + +This keyword allows to choose the default key algorithm of the IAK key. +Supported values are: ecc_nist_p256 or secp256r1, ecc_nist_p384 or secp384r1, +ecc_nist_p521 or secp521r1, rsa2048, rsa3072, and rsa4096. + +=item B<idevidkeyalgo> (since v0.11) + +This keyword allows to choose the default key algorithm of the IDevID key. +Supported values are the same as for iakkeyalgo. =back