Add physical presence initialization and locking to one-time initializations.

utility/tlcl_generator.c

Index: utility/tlcl_generator.c
diff --git a/utility/tlcl_generator.c b/utility/tlcl_generator.c
index cf2e48528d8294c0fb75e58ae83cd7c2340e3139..89d15d6f53d1efcc792afba05f940b267fc81ca3 100644
--- a/utility/tlcl_generator.c
+++ b/utility/tlcl_generator.c
@@ -190,6 +190,18 @@ Command* BuildPPEnableCommand(void) {
   return cmd;
 }
 
+Command* BuildFinalizePPCommand(void) {
+  int size = kTpmRequestHeaderLength + sizeof(TPM_PHYSICAL_PRESENCE);
+  Command* cmd = newCommand(TSC_ORD_PhysicalPresence, size);
+  cmd->name = "tpm_finalizepp_cmd";
+  AddInitializedField(cmd, kTpmRequestHeaderLength,
+                      sizeof(TPM_PHYSICAL_PRESENCE),
+                      TPM_PHYSICAL_PRESENCE_CMD_ENABLE |
+                      TPM_PHYSICAL_PRESENCE_HW_DISABLE |
+                      TPM_PHYSICAL_PRESENCE_LIFETIME_LOCK);
+  return cmd;
+}
+
 Command* BuildPPLockCommand(void) {
   int size = kTpmRequestHeaderLength + sizeof(TPM_PHYSICAL_PRESENCE);
   Command* cmd = newCommand(TSC_ORD_PhysicalPresence, size);
@@ -428,6 +440,7 @@ Command* (*builders[])(void) = {
   BuildPPAssertCommand,
   BuildPPEnableCommand,
   BuildPPLockCommand,
+  BuildFinalizePPCommand,
   BuildStartupCommand,
   BuildSelftestfullCommand,
   BuildContinueSelfTestCommand,