NAME

       tpm_setpresence- change TPM physical presence states or settings

SYNOPSIS

       tpm_setpresence [OPTION]

DESCRIPTION

       tpm_setpresence reports the status of the TPM's flags regarding physical presence.  This
       is the default behavior and also accessible via the --status option. Requesting a report
       of this status prompts for the owner password.  The --assert option changes the TPM to the
       physically present state.  The --clear option changes the TPM to the not present state.
       The --lock option locks the TPM to the current physical presence state for the current
       boot cycle.  The --enable-cmd option allows the TPM to accept local commands to toggle
       physical presence states. The --disable-cmd option prevents the TPM from accepting local
       commands to toggle physical presence states.  The --enable-hw option allows the TPM to
       accept hardware signals to toggle physical presence states. The --disable-hw option
       prevents the TPM from accepting hardware signals to toggle physical presence states.  The
       --set-lifetime-lock option locks the Command and Hardware enablement flags in their
       current state permenantly.  This option can never be undone.  The system will attempt to
       use the owner password to display the current states before preceding unless the --yes
       option is given to answer yes to all questions.  All changes are made with the
       TSC_Physical Presence API.

       -h, --help
              Display command usage info.

       -v, --version
              Display command version info.

       -l, --log [none|error|info|debug]
              Set logging level.

       -u, --unicode
              Use TSS UNICODE encoding for passwords to comply with applications using TSS popup
              boxes

       -a, --assert
              Assert that an admin is physically present at the machine.

       -c, --clear
              Remove the assertion that an admin is physically present at the machine.

       --lock Lock the assertions of physical presence in there current states until a reboot.

       --enable-cmd
              Allow use of commands to signal an admin is physically present.

       --disable-cmd
              Disallow use of commands to signal an admin is physically present.

       --enable-hw
              Allow use of hardware signals to signal an admin is physically present.

       --disable-hw
              Disallow use of hardware signals to signal an admin is physically present.

       --set-lifetime-lock
              Allow no further changes to the flags controling how physical presence can be
              signaled.  This is PERMANENT.

       -y, --yes
              Answer yes to all questions.  Only applicable with --set-lifetime-lock.

       -z, --well-known
              Authenticate using 20 bytes of zeros as owner password (the default TSS Well Known
              Secret), instead of prompting for an owner password.

SEE ALSO

       tpm_version(1), tpm_setenable(8), tpm_setactive(8), tpm_setownable(8), tcsd(8)

REPORTING BUGS

       Report bugs to <trousers-users@lists.sourceforge.net>