tpm_setpresence(8)

💖 tpm_setpresence — bestie's guide to TPM physical presence 💖

okay so this is tpm_setpresence(8) from the System Manager's Manual, aka the little tool that tells your TPM who's actually standing at the machine 🫶

---

✨ NAME ✨

tpm_setpresence — change TPM physical presence states or settings

---

✨ SYNOPSIS ✨

tpm_setpresence [OPTION]

---

✨ DESCRIPTION ✨

so like, tpm_setpresence reports the status of the TPM's flags regarding physical presence. that's the default behavior, no cap, and you can also get there with the --status option. heads up tho: asking for a report of this status prompts for the owner password 🔐

then we got the vibe-switchers:

• --assert changes the TPM to the physically present state ✅
• --clear changes the TPM to the not present state ❌
• --lock locks the TPM to the current physical presence state for the current boot cycle 🔒
• --enable-cmd lets the TPM accept local commands to toggle physical presence states
• --disable-cmd stops the TPM from accepting local commands to toggle physical presence states
• --enable-hw lets the TPM accept hardware signals to toggle physical presence states
• --disable-hw stops the TPM from accepting hardware signals to toggle physical presence states
• --set-lifetime-lock locks the Command and Hardware enablement flags in their current state permanently. this option can never be undone. 💀

before it does the thing, the system will attempt to use the owner password to display the current states — unless you pass --yes to answer yes to all questions.

and fr, all changes are made with the TSC_Physical Presence API. periodt.

---

✨ OPTIONS ✨

• -h, --help — display command usage info 🙋
• -v, --version — display command version info 🏷️
• -l, --log [none|error|info|debug] — set logging level 📝
• -u, --unicode — use TSS UNICODE encoding for passwords, so it plays nice with applications using TSS popup boxes 🌈
• -s, --status — report current physical presence states 📊
• -a, --assert — assert that an admin is physically present at the machine 🙋♀️
• -c, --clear — remove the assertion that an admin is physically present at the machine 🧹
• --lock — lock the assertions of physical presence in there current states until a reboot 🔒
• --enable-cmd — allow use of commands to signal an admin is physically present 💬
• --disable-cmd — disallow use of commands to signal an admin is physically present 🚫
• --enable-hw — allow use of hardware signals to signal an admin is physically present 🔌
• --disable-hw — disallow use of hardware signals to signal an admin is physically present ⛔
• --set-lifetime-lock — allow no further changes to the flags controling how physical presence can be signaled. this is PERMANENT. 👑
• -y, --yes — answer yes to all questions. only applicable with --set-lifetime-lock 🫡
• -z, --well-known — authenticate using 20 bytes of zeros as owner password (the default TSS Well Known Secret), instead of prompting for an owner password 🎀

bestie, real talk: --set-lifetime-lock is forever. like, no undo button, no take-backs, nothing. read twice, run once. 💅

---

🌸 SEE ALSO 🌸

tpm_version(1), tpm_setenable(8), tpm_setactive(8), tpm_setownable(8), tcsd(8)

---

💜 REPORTING BUGS 💜

report bugs to <trousers-users@lists.sourceforge.net> — they wanna hear from you 🐛

---

k bye bestie, go assert your presence (physically) ✨ this was TPM Management, dated 2005-05-06, serving absolute tpm_setpresence(8) realness. slay. 💖