Like this article? We recommend
Privacy Controls
All sensitive aspects of a root-of-trust are always under the express and exclusive control of the platform's owner until and unless the owner delegates the authority for selected operations. The owner can blanket turn-on or turn-off the root-of-trust at will. Anyone can blanket turn-off the root-of-trust until the platform is next rebooted.