SYSTEMD-TPM2-CLEAR.SERVICE(8)

🦋 NAME 🦋

systemd-tpm2-clear.service — bestie, this is the thing that asks the TPM security chip to get cleared on the next boot 💅

---

✨ SYNOPSIS ✨

systemd-tpm2-clear.service

/usr/lib/systemd/systemd-tpm2-clear

---

🌸 DESCRIPTION 🌸

Okay so systemd-tpm2-clear.service</p> is a service that requests the TPM to be reset by the PC firmware on the next boot. It does this through the TPM Physical Presence Interface, aka PPI (iykyk).

⚠️ Real talk though: this service does not immediately execute the clear operation. It literally just asks the PC firmware to do it at next boot — and at that point the user gets asked for confirmation before the operation actually happens. So nobody's wiping anything behind your back, periodt.

Typically this service gets hooked into the factory-reset.target unit, so it can request the TPM request before an immediate reboot. See Factory Reset[1] for more deets 👑

---

💖 OPTIONS 💖

Here's what it understands, bestie:

• --graceful — Exit cleanly and execute no operation if the system does not possess a TPM chip. Like, no TPM? No drama, we just dip gracefully 🫶

Added in version 258.

• -h, --help — Print a short help text and exit. The classic. 👑
• --version — Print a short version string and exit. Also the classic. ✨

---

🎀 KERNEL COMMAND LINE 🎀

systemd-tpm2-clear</p> understands the following kernel command line parameters:

• systemd.tpm2_allow_clear= — Takes a boolean argument. If false the service will succeed, but instead of requesting the TPM clear operation from the PC firmware it will not execute any operation. If not specified it defaults to true.

Added in version 258.

---

🌈 SEE ALSO 🌈

• systemd(1)
• systemd-tpm2-setup.service(8)
• systemd-factory-reset-request.service(8)

---

📝 NOTES 📝

1. Factory Reset — https://systemd.io/FACTORY_RESET

---

and that's the whole page, bestie — brought to you by systemd 262.1 💜 go forth and clear that TPM (eventually, on next boot, with user confirmation) 🧚🍓