tpm2_clearcontrol(1) on Linux
The text e5f821594ff7, as Debian 12 (Bookworm) shipped it.
Set/ Clear TPMA_PERMANENT.disableClear attribute to effectively block/ unblock lockout authorization handle for issuing TPM clear.
Flags it lists
-
--auth -
--cphash -
--hierarchy -
-C -
-P