TPM Enable and/or Activate is an operation mostly used on TPM 1.2. Bellow you can see how to do it via BIOS or PPI.

Note that executing the operation via PPI is the recommended method due its concise steps and not requiring console access to the unit for new BIOS. Gracefully used to avoid visits to the server racks, avoid console cables and back-and-forth communication with IT teams on field.

Note: This article mostly applies to TPM 1.2, available only on NSC models produced prior to 2020.

Enable and Activate TPM via PPI (Physical Presence Interface)

1. Login as root in NG Shell;
   
2. Verify TPM clear+enable+activate operation (14) on PPI operations list is 'User not required';
   
1. cat /sys/class/tpm/tpm0/ppi/tcg_operations
   
2. See option 14 is 'User not required';
   
3. Request the operation to TPM PPI;
   
1. echo 14 > /sys/class/tpm/tpm0/ppi/request
   
4. Reboot the device;
   
5. Wait unit reboot and boot up. Now the TPM is cleared, enabled and activated;

Note: This option might not require console access to the unit to execute the operation;

Note: Even on older BIOS, the operation is usually 'User not required', but if it is 'User required' on your unit, it will require confirming operation on the unit console when the unit reboots, what requires console access to the unit.

Enable and Activate TPM on BIOS

1. Restart the Nodegrid
   
2. Press "shift + D" to enter in Advanced BIOS
   
3. Go to Advanced tab
   
4. Select Trusted Computing
   
5. See the fields from Configuration and Current Status
   
6. If TPM Enabled Status is Disabled, change TPM State to Enabled
   
7. If Security Device Support is Disabled, change to Enabled
   
8. Presses ‘F4' to save your changes and exit