SYSTEMD-TPM2-SETUP.SERVICE(8) systemd-tpm2-setup.service (NAME) systemd-tpm2-setup.service, systemd-tpm2-setup-early.service, systemd- tpm2-setup - TPM2 (SRK) NvPCR (SYNOPSIS) systemd-tpm2-setup.service /usr/lib/systemd/systemd-tpm2-setup (DESCRIPTION) systemd-tpm2-setup.service systemd-tpm2-setup-early.service (SRK) TPM . NvPCR ( PCR TPM NV) (anchoring secret) . SRK PEM /run/systemd/tpm2-srk-public-key.pem /var/lib/systemd/tpm2-srk-public-key.pem . TPM2B_PUBLIC /run/systemd/tpm2-srk-public-key.tpm2_public /var/lib/systemd/tpm2-srk-public-key.tpm2b_public . systemd-tpm2-setup-early.service ( initrd) SRK /run/systemd/tpm2-srk-public-key.* ( /var/ ) systemd-tpm2-setup.service /var/lib/systemd/tpm2-srk-public-key.* . (FILES) /run/systemd/tpm2-srk-public-key.pem, /run/systemd/tpm2-srk-public-key.tpm2b_public SRK PEM TPM2B_PUBLIC . 255. /var/lib/systemd/tpm2-srk-public-key.pem, /var/lib/systemd/tpm2-srk-public-key.tpm2_public SRK PEM TPM2B_PUBLIC ( /var/ ) . 255. /usr/lib/nvpcr/*.nvpcr NvPCR. 259. /run/credentials/@encrypted/nvpcr-anchor.* NvPCR (system credentials). 259. $BOOT/loader/credentials/nvpcr-anchor.*.cred NvPCR systemd-stub(7). 259. (SEE ALSO) systemd(1) systemd 261.2 SYSTEMD-TPM2-SETUP.SERVICE(8)