Console print the SHA-2 hash of the Trusted Platform Module (TPM) Endorsement Key (EK), if any, present on the host. This value can be used to configure TPM attestation for a restricted whitelist of hosts. For examples, see https://technet.microsoft.com/en-us/library/dn581921.aspx and http://www.jwsecure.com/technologies/strongnet/. Usage and sample output:

TpmEkPubTool.exe

7a30ad11b5c8ecf0dbcb0355be89c090aa91d1e29fd9bc328c40ad1a708e937d