tpm_setclearable(8)

💖 tpm_setclearable — a lil guide from your fav Unix bestie 💖

okay so bestie, welcome to tpm_setclearable, part of the TPM Management crew in the System Manager's Manual. grab a boba, this one's short and sweet fr fr 🧋✨

✨ NAME ✨

tpm_setclearable — disable TPM clear operations 💅

🦋 SYNOPSIS 🦋

tpm_setclearable [OPTION]

🌸 DESCRIPTION 🌸

so basically, tpm_setclearable reports the status of the TPM's flags about how the TPM can be cleared. that's the default behavior, no cap — and you can also get it with the --status option. asking for this lil status report prompts you for the owner password. 🔑

then there's the --owner option, which requests that the TPM disable clear operations (it does this via the TPM_DisableOwnerClear API), which disables the owner from clearing out the ownership information. this operation also prompts for the owner password, and it stays in effect until the current owner is cleared. periodt.

and the --force option (via the TPM_DisableForceClear API) disables using Physical Presence to authorize a clear operation. this one does not require authorization, so it skips the owner password prompt entirely — no password, no stress. 🫶 but heads up: this operation is only in effect until a reboot. so if you reboot, it's gone, bye. 💀

now the flags, one by one, let's go:

• -h, --help — displays the command usage info. your lil "help me pls" button 🎀
• -v, --version — displays the command version info. slay, tell me who you are ⭐
• -l, --log [none|error|info|debug] — sets the logging level. pick your vibe: none, error, info, or debug 🌈
• -u, --unicode — use TSS UNICODE encoding for passwords, so it plays nice with applications that use TSS popup boxes ✨
• -s, --status — report the status of the flags regarding how the TPM can be cleared 👑
• -o, --owner — disable use of owner authorization for authorizing a clear operation until a new owner exists 🔒
• -f, --force — disable use of Physical Presence for authorizing a clear operation until a reboot has occurred 🔥
• -z, --well-known — authenticate using 20 bytes of zeros as the owner password (that's the default TSS Well Known Secret), instead of prompting for an owner password 🙈

💜 SEE ALSO 💜

tpm_version(1), tpm_takeownership(8), tpm_clear(8), tcsd(8)

go read those next, bestie, iykyk 📚

😭 REPORTING BUGS 😭

found a bug? not me manifesting that. report bugs to <trousers-users@lists.sourceforge.net> and the devs will handle it 🫡

quick vibe check: --owner sticks around until the current owner is cleared, but --force? that one evaporates the second you reboot. don't forget it exists, bestie 💀

okay that's the whole page!! this lil slice of TPM Management is from the System Manager's Manual, dated 2005-05-05, and it's brought to you by the TPM Management folks. thanks for reading, you ate that, mwah 💖✨🎀🦋🌸💅🫶