Add to tpm2_certify

[mwiseman-byid]

No description provided.

[mwiseman-byid]

This is currently "hard coded" within the tools. The qualifyingData may be used by some applications for anti-reply. Add a parameter to input data. If parameter is not provided continue to use the existing "hard coded" value.

[AndreasFuchsTPM]

Which exact tool are you referring to ?
tpm2_quote has -q, --qualification=HEX_STRING_OR_PATH

[mwiseman-byid]

Oops, I "fat fingered" the issue title. Just changed the title (my finger must have slipped off). This applies to tpm2_certify.

[mwiseman-byid]

Rationale: While Certify may not need a nonce (freshness not really needed) there are some cases where the same set of RP's may share an Attestation Key. This would provide unique evidence for each RP.