manual: updated for usage of tpm2_loadexternal

manual

@@ -189,10 +189,10 @@ where:
     -L/--oldLockPasswd <password>    old Lockout authorization (string,optional,default:NULL).
 
 example:
-  Set ownerAuth, endorsementAuth and lockoutAuth to emptyAuth: 
-  tpm2_takeownership -c
-  Set ownerAuth, endorsementAuth and lockoutAuth to a newAuth: 
-  tpm2_takeownership -o new -e new -l new -O old -E Old -L old
+Set ownerAuth, endorsementAuth and lockoutAuth to emptyAuth: 
+    tpm2_takeownership -c
+Set ownerAuth, endorsementAuth and lockoutAuth to a newAuth: 
+    tpm2_takeownership -o new -e new -l new -O old -E Old -L old
 
 * tpm2_getpubek
 Generate TCG profile compliant endorsement key(endorsement hierarchy primary
@@ -493,7 +493,7 @@ example:
 
 * tpm2_loadexternal
 load an object that is not a Protected Object into the TPM. The command allows
-loading of a public area or both a public and sensitive area.
+loading of a public area or both a public and a sensitive area.
 
 Usage:
     -H, --hierarchy <e|o|p|n>   Hierarchy with which the object area is associated
@@ -506,7 +506,11 @@ Usage:
     -C, --context <filename>   The file to save the object context, optional
 
 example:
-   tpm2_loadexternal -H <e|o|p|n> -u <pubKeyFileName> -r <privKeyFileName> -C object.context
+Load a public area generated by tpm2_create, tpm2_readpublic or manually
+    tpm2_loadexternal -H <e|o|p|n> -u <pubKeyFileName> -C object.context
+Load a key with sensitive area. Both the public & the senstive areas shall
+be generated externally. *DON'T* use the areas generated by tpm2_create.
+    tpm2_loadexternal -H n -u <pubKeyFileName> -r <privKeyFileName> -C object.context
 
 
 Subset 4: Encryption tools