tpm_setownable(8)

💖 tpm_setownable — the "can this TPM even be owned tho" page 💖

okay so bestie, this one lives in section 8 of the System Manager's Manual (that's the sysadmin-y one, iykyk), and the full vibe of the page is literally just TPM Management - tpm_setownable. she's a TPM girlie and she's here to answer one (1) extremely specific question for you. 🎀

✨ NAME ✨

tpm_setownable — change whether the TPM allows tpm_takeownership operations

like. that's it. that's her whole job. she flips the "can u own me or not" switch. 💅

🌸 SYNOPSIS 🌸

tpm_setownable [OPTION]

🦋 DESCRIPTION 🦋

so here's the tea, bestie. 🍓 tpm_setownable reports the status of the TPM's flags regarding if the TPM can be owned. that's the default behavior, and you can also get at it explicitly with the --status option. lowkey iconic of her.

asking for a report of this status will prompt you for the owner password, so be ready for that, don't get caught off guard bestie. 🙈

• the --allow option sets the system's TPM to allow tpm_takeownership operations (it does this via the TPM_SetOwnerInstall API).
• the --prevent option (also via the TPM_SetOwnerInstall API) prevents the TPM from accepting tpm_takeownership operations.

⚠️ heads up!! both --allow and --prevent require physical presence. like, you gotta be there there. no remote vibes allowed. 🫶

💀 and also: these operations are persistent. they stick around. not a temporary little mood, a whole lifestyle.

one more thing: tpm_takeownership requires the tpm be enabled. so like, if it's not enabled, that's a different problem, bestie. 😭

👑 the options, babes 👑

• -h, --help — display command usage info. she explains herself. main character behavior fr fr. ✨
• -v, --version — display command version info. so you know which era of her you're talking to.
• -l, --log [none|error|info|debug] — set logging level. pick ur level of ✨drama✨: none, error, info or debug.
• -u, --unicode — use TSS UNICODE encoding for passwords to comply with applications using TSS popup boxes. (popup boxes need unicode passwords, no cap.)
• -s, --status — report the status of flags regarding if the TPM can be owned. (the default behavior, but now you can say it out loud. 💅)
• -a, --allow — allow tpm_takeownership operations. requires physical presence, remember!! 🫶
• -p, --prevent — prevent tpm_takeownership operations. also requires physical presence!! 🫶
• -z, --well-known — authenticate using 20 bytes of zeros as owner password (the default TSS Well Known Secret), instead of prompting for an owner password. it's giving "no password is also a password" and honestly? iconic. 🌈

🌟 SEE ALSO 🌟

the girlies in her group chat, go say hi:

• tpm_version(1)
• tpm_takeownership(8)
• tpm_setpresence(8)
• tpm_setenable(8)
• tcsd(8)

😤 REPORTING BUGS 😤

found a bug? not on her watch. report bugs to <trousers-users@lists.sourceforge.net> 💌

and that's the whole page, bestie!! brought to you by TPM Management, dated 2005-05-06, filed under tpm_setownable(8) — she's been slaying since 2005 and she's not stopping. mwah. 💖✨