Login or Register to Ask a Question and Join Our Community

Linux and UNIX Man Pages

Linux & Unix Commands - Search Man Pages

tpm_setpresence(8) [centos man page]

tpm_setpresence(8)					      System Manager's Manual						tpm_setpresence(8)

							 TPM Management - tpm_setpresence

NAME

       tpm_setpresence- change TPM physical presence states or settings

SYNOPSIS

       tpm_setpresence [OPTION]

DESCRIPTION

       tpm_setpresence reports the status of the TPM's flags regarding physical presence.  This is the default behavior and also accessible via
       the --status option. Requesting a report of this status prompts for the owner password.	The --assert option changes the TPM to the
       physically present state.  The --clear option changes the TPM to the not present state.	The --lock option locks the TPM to the current
       physical presence state for the current boot cycle.  The --enable-cmd option allows the TPM to accept local commands to toggle physical
       presence states. The --disable-cmd option prevents the TPM from accepting local commands to toggle physical presence states.  The --enable-
       hw option allows the TPM to accept hardware signals to toggle physical presence states. The --disable-hw option prevents the TPM from
       accepting hardware signals to toggle physical presence states.  The --set-lifetime-lock option locks the Command and Hardware enablement
       flags in their current state permenantly.  This option can never be undone.  The system will attempt to use the owner password to display
       the current states before preceding unless the --yes option is given to answer yes to all questions.  All changes are made with the
       TSC_Physical Presence API.

       -h, --help
	      Display command usage info.

       -v, --version
	      Display command version info.

       -l, --log [none|error|info|debug]
	      Set logging level.

       -u, --unicode
	      Use TSS UNICODE encoding for passwords to comply with applications using TSS popup boxes

       -a, --assert
	      Assert that an admin is physically present at the machine.

       -c, --clear
	      Remove the assertion that an admin is physically present at the machine.

       --lock Lock the assertions of physical presence in there current states until a reboot.

       --enable-cmd
	      Allow use of commands to signal an admin is physically present.

       --disable-cmd
	      Disallow use of commands to signal an admin is physically present.

       --enable-hw
	      Allow use of hardware signals to signal an admin is physically present.

       --disable-hw
	      Disallow use of hardware signals to signal an admin is physically present.

       --set-lifetime-lock
	      Allow no further changes to the flags controling how physical presence can be signaled.  This is PERMANENT.

       -y, --yes
	      Answer yes to all questions.  Only applicable with --set-lifetime-lock.

       -z, --well-known
	      Authenticate using 20 bytes of zeros as owner password (the default TSS Well Known Secret), instead of prompting for an owner
	      password.

SEE ALSO

       tpm_version(1), tpm_setenable(8), tpm_setactive(8), tpm_setownable(8), tcsd(8)

REPORTING BUGS

       Report bugs to <trousers-users@lists.sourceforge.net>

TPM Management							    2005-05-06							tpm_setpresence(8)

Check Out this Related Man Page

tpm_setenable(8)					      System Manager's Manual						  tpm_setenable(8)

							  TPM Management - tpm_setenable

NAME

       tpm_setenable - change TPM enable states

SYNOPSIS

       tpm_setenable [OPTION]

DESCRIPTION

       tpm_setenable reports the status of the TPM's flags regarding the enable state of the TPM.  This is the default behavior and also
       accessible via the --status option. Requesting a report of this status prompts for the owner password.  The --enable option changes the
       system's TPM to the enabled state (via the TPM_OwnerSetDisable API).  This operation prompts for the owner password and is persistent. The
       --disable option (via the TPM_OwnerSetDisable API) changes the system's TPM to the disabled state.  This operation prompts for the owner
       password and is persistent.  A disabled TPM is essentially off and does not allow a tpm_takeownership to occur.	The --force option
       overrides the owner password prompt and relies on physical presence for the operation authorization (via the TPM_PhysicalEnable and
       TPM_PhysicalDisable APIs).  The --enable, --disable, and --status options are mutually exclusive and the last one on the command line will
       be carried out.

       -h, --help
	      Display command usage info.

       -v, --version
	      Display command version info.

       -l, --log [none|error|info|debug]
	      Set logging level.

       -u, --unicode
	      Use TSS UNICODE encoding for passwords to comply with applications using TSS popup boxes

       -s, --status
	      Report the status of flags regarding the TPM enable states.

       -e, --enable
	      Make the TPM enabled.  Operation is persistent and  prompts for owner authorization.

       -d, --disable
	      Make the TPM disabled.   Operation is persistent and prompts for owner authorization.

       -f, --force
	      Overrides the prompt for owner authorization and uses physical presence to authorize the action.

       -z, --well-known
	      Authenticate using 20 bytes of zeros as owner password (the default TSS Well Known Secret), instead of prompting for an owner
	      password.

SEE ALSO

       tpm_version(1), tpm_setpresence(8), tpm_takeownership(8), tpm_setactive(8), tcsd(8)

REPORTING BUGS

       Report bugs to <trousers-users@lists.sourceforge.net>

TPM Management							    2005-05-06							  tpm_setenable(8)
Man Page