3 ms·
TPM with pin is definitely supported[1] by systemd-cryptenroll on linux: > It is possible to require a PIN to be entered in addition to the TPM state being cor
by bmicraft 2y ago
TPM with pin is definitely supported[1] by systemd-cryptenroll on linux:
> It is possible to require a PIN to be entered in addition to the TPM state being correct. Simply add the option --tpm2-with-pin=yes to the command above and enter the PIN when prompted.
[1] https://wiki.archlinux.org/title/Systemd-cryptenroll#Trusted_Platform_Module https://wiki.archlinux.org/title/Systemd-cryptenroll#Trusted...
- mr_mitm 2y agoThanks, maybe I was just too stupid then. I messed around with dracut and gave up when the system stopped booting. Fixed it while cursing all this complexity and got back to actual work.