security.tpm2.fapi.ekFingerprint

The fingerprint of the endorsement key.

A value of null means that you have chosen not to specify the expected fingerprint of the EK. You can still have an endorsement key, it just won't get checked to see if it's fingerprint matches a particular value before being used.

Type
null or string
Default
null
Declared
<nixpkgs/nixos/modules/security/tpm2.nix>