.TH DcsCfg 0 "Configuration tool of DCS" .SH NAME Configure boot loader parameters and tests EFI environment for compatibility .SH SYNOPSIS DcsCfg -dl DcsCfg -dc -ds -de -aa DcsCfg -aa DcsCfg -ds -pl DcsCfg -pf -pl DcsCfg -ds -pf -ps DcsCfg -ds -pf -pa DcsCfg -pf -pe -aa -rnd DcsCfg -pf -pd -aa -rnd DcsCfg -pf -pnt -phide -ps DcsCfg -kp DcsCfg -ds -srm DcsCfg -ds -srw DcsCfg -ds -sra DcsCfg -ds -wipe .SH OPTIONS ** Devices -dl - block device list (numbers are used in -ds, -de) -ds – select device -de – end device to check (starts from select) -dc - check devices (try to authorize) -ul - USB devices list -tl - Touch devices list -tt - Test touch device -gl - graphics device list -gd - graphics device select -gm - graphics mode select -bl - Beep device list -bt - Beep device test -setup - interactive setup (TODO) ** Crypt volume -aa - ask authorization parameters -ach - create header on block device -vec - block device encrypt -vdc - block device decrypt -vcp - block device change password ** Random -rnd - select rnadom type (0 - none, 1 - file, 2- rdrand, 3 HMAC, 4 OPENSSL 5 TPM) -rndgen - generate random file -rndload - load rnd generator state from file -rndsave - save rnd generator state to file ** Disk entries table/partitions -pl - GPT list -pf - file with GPT and params -ps - save GPT to file -pz - delete info from GPT to file -pa - applay GPT from file to disk -pe - encrypt GPT -pd - decrypt GPT -pnt - partition number as template (from -pl) -phide - hide partions from to ; - start sector of hidden partition, - end sector of hidden partition -pedt - partition number to edit(from -pl) -pexec - edit executable parameter -prndsave - save random state to params -prndload - load random state from params -pwdcache - edit password cache in params ** Security region data -kp - keys file of platform to save -srm - mark disk as security regions container(write CRC of platform to 61 sector); - number of possible security regions -srw - wipe security regions data with random data (write random data [62, 62 + 256 * SRT]) it has to be free! check first partition start sector! -sra - add to security region -srdump - dump security regions from USB to files (list of files created - N) -wipe - write random data to sectors range [SS,SE] ** Rescue -osdecrypt - decrypt OS (rescue) -osrestorekey - restore key (rescue) ** TPM -tpmpcrs - print PCRs -tpmnvlist - List NV regions in TPM -tpmcfg - Configure TPM ** Table configuration -tbf - name of tables file -tbz - zero tables -tbl - list tables -tbn - name of table to delete or appened (DCSPROP_, PICTPWD_) -tbd - delete table () -tba - append table (dcsprop or picture) -tbdump - save tables .SH DESCRIPTION NOTES: This is test tool for DCS developers. Use it with care. .SH EXAMPLES EXAMPLES: * To list block devices Shell> dcscfg -dl * To change password on block device 1 Shell> dcscfg -aa -scp 1 * To list graphics devices Shell> dcscfg -gl * To select graphics devices mode 1 on device 1 Shell> dcscfg -gd 1 -gm 1 * To list GPT Shell> dcscfg -ds 1 -pl * To save GPT Shell> dcscfg -ds 1 -pf gpt_org -ps * To apply GPT to disk Shell> dcscfg -ds 1 -pf gpt_disk -pa * To hide partition [123456,5678910] as template use partition(9) Shell> dcscfg -pf gpt_disk -pht 9 -phide 123456 5678910 -ps * To encrypt GPT before adding to security region Shell> dcscfg -aa -pf gpt_hidden_boot -pe -ps * To mark USB disk(1) as security regions container(write CRC of platform to 61 sector) Shell> dcscfg -ds 1 -srm 5 * To wipe 5 security regions with random data (write random data [62, 62 + 256 * 5]) Sectors has to free! check first partition start sector! Shell> dcscfg -ds 1 -srw 5 * To add gpt_hidden_boot to security region 2 on device 1 Shell> dcscfg -ds 1 -pf gpt_hidden_boot -sra 2 .SH RETURNVALUES RETURN VALUES: 0 Exited normally