Interesting question. I think so? https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/security_hardening/configuring-automated-unlock

Interesting question. I think so? https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/security_hardening/configuring-automated-unlocking-of-encrypted-volumes-using-policy-based-decryption_security-hardening https://access.redhat.com/documentation/en-us/red_hat_enterp... Looks like clevis is gpl3 - so I expect it's not packaged as standard for any of the bsds? https://github.com/latchset/clevis https://github.com/latchset/clevis See also: Ed: and: https://github.com/kmille/cryptboot https://github.com/kmille/cryptboot https://security.stackexchange.com/questions/194081/use-tpm2-0-to-securely-decrypt-the-hard-drive-in-linux-unattended https://security.stackexchange.com/questions/194081/use-tpm2... https://security.stackexchange.com/questions/39329/how-does-the-tpm-perform-integrity-measurements-on-a-system/44350 https://security.stackexchange.com/questions/39329/how-does-... https://superuser.com/questions/619721/can-i-use-the-tpm-on-linux-without-trustedgrub https://superuser.com/questions/619721/can-i-use-the-tpm-on-...