This feature aims to enable support for provisioning bare metal systems with Secure Boot and TPM enabled using Red Hat Satellite.

Currently, while Secure Boot provisioning is partially functional, it only works reliably when TPM is disabled.

This gap impacts customers who enforce strict security policies requiring Secure Boot with TPM (Trusted Platform Module).

By enabling this feature, Red Hat Satellite will align with modern hardware security expectations

While Secure Boot with TPM support has been implemented and tested for VMware-based provisioning (SAT-25810), it has not been extended to bare metal environments.