# tpm2_ek_cert_gen This tool will create an Endorsement Key Certificate for a TPM2. Use in case your TPM's vendor decided to be lazy (or non-helpful?) and not insert a EK certificate into your TPM.