[Unit]
Description=Activate TPM for Full Disk Encryption
Wants=local-fs.target

[Service]
Type=oneshot
ExecStart=/usr/sbin/fdectl tpm-activate

[Install]
WantedBy=default.target