I am looking for a way to implement a trusted boot using a firmware TPM2.0 on Arch Linux. I am using TPM2.0-TSS, and tpm2-tools, however I cannot find a way to do this with tpm2-tools, as I do not believe it allows me to make any changes to the PCRs. I have been looking into tboot, but am a little confused if it will work with my TPM.
Is there any way I can use tpm2-tools to implement a trusted boot? If not, are there any alternative solutions? Any help would be appreciated!