systemd-tpm2-clear.service

systemd

Request that the TPM security chip is cleared on next boot

systemd-tpm2-clear.service

/usr/lib/systemd/systemd-tpm2-clear

Description

systemd-tpm2-clear.service is a service that requests that the TPM is reset by the PC firmware on the next boot. It makes use of the TPM Physical Presence Interface (PPI). Note that this service does not immediately execute the clear operation, but simply asks the PC firmware to execute it at next boot, where the user will be asked for confirmation before the operation is done.

systemd-tpm2-clear.service is typically hooked into the factory-reset.target unit in order to request the TPM request before an immediate reboot. See Factory Reset for more information.

Options

The following options are understood:

--graceful
Exit cleanly and execute no operation if the system does not possess a TPM chip.

Kernel Command Line

systemd-tpm2-clear understands the following kernel command line parameters:

systemd.tpm2_allow_clear=
Takes a boolean argument. If false the service will succeed, but instead of requesting the TPM clear operation from the PC firmware it will not execute any operation. If not specified defaults to true.