[tpm2] How to initialize a used TPM2 module and thoughts on clevis

Hello -

New to TPM2 here. I'm adding a *used* TPM2 module to a mobo that has a header. What are best practices to initialize the TPM2 module? Should I clear it first, possibly via the BIOS? Should I set an owner password?

So far I found `echo 5 > /sys/class/tpm/tpm0/ppi/request` which is probably a good idea to do as I don't know where the module comes from and whether anyone has messed with it before.

I'd appreciate any pointers in the right direction and the correct commands to start with a clean TPM2. Running Ubuntu 20.04 and I installed tpm2-tools.

Also, is `clevis encrypt tpm2` a good wrapper if I just want to a simple way to encrypt/decrypt a file on disk that holds other credentials?

Thank you!