HP-UX Trusted Computing Services A.02.00 Administrator's Guide

10. After the system reboots, enter the following commands to unconfigure and reconfigure
TCS:
swconfig -u TCS; swconfig TCS
If the TCS_EVFSENABLED flag is set (TCS_EVFSENABLED=1) in the /etc/rc.config.d/
tcsconf file, you must set it 0 before entering the swconfig -u TCS command.
11. Enter the following command to verify that the TPM is enabled and TCS is operating:
tpmlist status
The output shows the following values if TPM is enabled and TCS is operating:
Owned: yes
Activated: yes
Enabled: yes
Ownable: yes
Owner clear: disabled
Force clear: disabled
12. If you cleared the TCS_EVFSENABLED flag in the /etc/rc.config.d/tcsconf file in
step 2, reset it to 1 (TCS_EVFSENABLED=1).
13. If you have a TPM key archive file created before you cleared TPM ownership, you can use
the tpmadm restore command to restore the previous RK and migrate its descendent
keys. For example:
# tpmadm restore filename=/tmp/tpmKeyArchive
Clearing TPM Ownership 77