SYSTEMD-TPM2-SWTPM.SERVICE(8)

💖 systemd-tpm2-swtpm.service — bestie's guide to a lil fake TPM 💖

okay so this is the man page for systemd-tpm2-swtpm.service (and the binary it runs, systemd-tpm2-swtpm), and no cap it's giving "we ran out of real TPM so we made one in software" energy. let's get into it ✨

---

🌸 NAME 🌸

systemd-tpm2-swtpm.service, systemd-tpm2-swtpm — provide a fallback software TPM 🫶

---

✨ SYNOPSIS ✨

systemd-tpm2-swtpm.service

/usr/lib/systemd/systemd-tpm2-swtpm

---

🦋 DESCRIPTION 🦋

so like. systemd-tpm2-swtpm.service hands you a fallback software TPM, and it's literally made for environments where you don't have a discrete TPM or a firmware TPM (aka a "hardware TPM"). that's the whole vibe. 👑

it gets pulled into the boot process by systemd-tpm2-generator(8) in exactly two situations: a hardware TPM is not available, and the system is configured to provide a software TPM in that case. both boxes need ticking, bestie.

⚠️ okay important, real talk: a software TPM provides only very weak security properties compared to a hardware TPM. so it should only ever be used as a fallback mechanism — like, if a hardware TPM genuinely isn't available but you still want TPM semantics. that's the only time. periodt. 🙈

this service ultimately wraps swtpm(8), so that's the little guy doing the actual work underneath. 💅

if the boot secret /.extra/boot-secret (in the initrd) or /run/systemd/stub/boot-secret (on the host) is available, then the software TPM NVRAM storage gets encrypted with this key. cute, right? see systemd-stub(7) for the details. 🔐

the TPM NVRAM storage lives on the EFI System Partition, because it has to be accessible during very early boot-up — specifically before the root file system is decrypted and mounted. so yeah, early. like, earlier than you'd think. 🌈

---

🎀 SEE ALSO 🎀

systemd(1), systemd-tpm2-generator(8), swtpm(8), systemd-stub(7)

---

and that's the whole page, bestie!! this was systemd 262.1, mwah 💖 go forth and only use your software TPM as a fallback, i'm literally begging 🫶✨🌸