From: Lennart Poettering <lennart@poettering.net>
Date: Thu, 13 Nov 2025 08:42:43 +0000 (+0100)
Subject: man: document that ConditionSecurity=tpm2 means full UEFI/PC Client profile support
X-Git-Tag: v259-rc1~48^2~2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=a84202edc59bbdc969d60423b4a360a5bbc65946;p=thirdparty%2Fsystemd.git

man: document that ConditionSecurity=tpm2 means full UEFI/PC Client profile support

TPM2 support is not too useful if the firmware doesn't actually use it
for the boot chain, hence we require the full PC client profile support.
Let's make that clear in the docs.

Fixes: #38939
---

diff --git a/man/systemd.unit.xml b/man/systemd.unit.xml
index 7f552a687f1..d434434e623 100644
--- a/man/systemd.unit.xml
+++ b/man/systemd.unit.xml
@@ -1586,7 +1586,8 @@
                 </row>
                 <row>
                   <entry>tpm2</entry>
-                  <entry>Trusted Platform Module 2.0 (TPM2)</entry>
+                  <entry>Trusted Platform Module 2.0 (TPM2) (with full UEFI support, including the TCG PC Client
+                  Platform Firmware Profile)</entry>
                 </row>
                 <row>
                   <entry>cvm</entry>