From a84202edc59bbdc969d60423b4a360a5bbc65946 Mon Sep 17 00:00:00 2001
From: Lennart Poettering <lennart@poettering.net>
Date: Thu, 13 Nov 2025 09:42:43 +0100
Subject: [PATCH] man: document that ConditionSecurity=tpm2 means full UEFI/PC
 Client profile support

TPM2 support is not too useful if the firmware doesn't actually use it
for the boot chain, hence we require the full PC client profile support.
Let's make that clear in the docs.

Fixes: #38939
---
 man/systemd.unit.xml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/man/systemd.unit.xml b/man/systemd.unit.xml
index 7f552a687f1..d434434e623 100644
--- a/man/systemd.unit.xml
+++ b/man/systemd.unit.xml
@@ -1586,7 +1586,8 @@
                 </row>
                 <row>
                   <entry>tpm2</entry>
-                  <entry>Trusted Platform Module 2.0 (TPM2)</entry>
+                  <entry>Trusted Platform Module 2.0 (TPM2) (with full UEFI support, including the TCG PC Client
+                  Platform Firmware Profile)</entry>
                 </row>
                 <row>
                   <entry>cvm</entry>
-- 
2.47.3