TPM2 on rhel 7

after install TPM2 software package ( tpm2-abrmd, tpm2-tss, tpm2-tools, tpm2-tss-devel ), added one file "20-tss.rules" into /etc/udev/rules.d/
/etc/udev/rules.d/20-tss.rules :
---
KERNEL=="tpm*", MODE=="0600", OWNER=="tss", GROUP=="tss"
---

then trigger the udev daemon:
udevadm control --reload-rules;udevadm trigger

enable tpm2-abrmd
systemctl enable tpm2-abrmd;systemctl start tpm2-abrmd

ps. CentOS 7 does not need to added 20-tss.rules.