Add physical presence initialization and locking to one-time initializations.

firmware/lib/tpm_lite/include/tlcl.h

 /* Copyright (c) 2010 The Chromium OS Authors. All rights reserved.
  * Use of this source code is governed by a BSD-style license that can be
  * found in the LICENSE file.
  */
 
 /* TPM Lightweight Command Library.
  *
  * A low-level library for interfacing to TPM hardware or an emulator.
  */
 
@@ skipping 70 matching lines @@
 uint32_t TlclWriteLock(uint32_t index);
 
 /* Read-locks space at [index].  The TPM error code is returned.
  */
 uint32_t TlclReadLock(uint32_t index);
 
 /* Asserts physical presence in software.  The TPM error code is returned.
  */
 uint32_t TlclAssertPhysicalPresence(void);
 
-/* Enable the physical presence command.  The TPM error code is returned.
+/* Enables the physical presence command.  The TPM error code is returned.
  */
 uint32_t TlclPhysicalPresenceCMDEnable(void);
 
+/* Finalizes the physical presence settings: sofware PP is enabled, hardware PP
+ * is disabled, and the lifetime lock is set.  The TPM error code is returned.
+ */
+uint32_t TlclFinalizePhysicalPresence(void);
+
 /* Turns off physical presence and locks it off until next reboot.  The TPM
  * error code is returned.
  */
 uint32_t TlclLockPhysicalPresence(void);
 
 /* Sets the nvLocked bit.  The TPM error code is returned.
  */
 uint32_t TlclSetNvLocked(void);
 
 /* Returns 1 if the TPM is owned, 0 otherwise.
@@ skipping 36 matching lines @@
 
 /* Gets the entire set of permanent flags.
  */
 uint32_t TlclGetPermanentFlags(TPM_PERMANENT_FLAGS* pflags);
 
 /* Gets the entire set of volatile (ST_CLEAR) flags.
  */
 uint32_t TlclGetSTClearFlags(TPM_STCLEAR_FLAGS* pflags);
 
 #endif  /* TPM_LITE_TLCL_H_ */