A key may be enrolled in both the TPM and the LUKS volume using only one command. The following
To check that the new key was enrolled, dump the LUKS configuration and look for a {{ic|systemd-tpm2}} token entry
15 KB (2,241 words) - 13:25, 21 May 2023
...ngerprint sensor (available to some models) are too small to be able to be enrolled and used successfully.
5 KB (705 words) - 12:41, 20 January 2023
...t will not work in Linux until you flash it again (but this does not clear enrolled fingerprints). So it's best to pick one OS to use the fingerprint reader in
6 KB (900 words) - 15:09, 13 March 2023
...Key sets Secure Boot in "User Mode", leaving "Setup Mode", so it should be enrolled last in sequence.}}
...not the '''second''' one. Only the certificate for the second signature is enrolled in the UEFI Secure Boot variables, so the Secure Boot verification fails.
53 KB (8,158 words) - 13:26, 9 June 2023
...th {{ic|fprintd-enroll}} as a regular (non-root) user. You may verify your enrolled fingerprints with {{ic|fprintd-verify}}.
10 KB (1,461 words) - 23:03, 1 May 2023
# The UEFI must have keys enrolled.
10 KB (1,540 words) - 06:26, 22 May 2023
It should list all custom keys/certificates (PK, KEK, DB, optionally dbx) as enrolled in the machine's UEFI Firmware.
10 KB (1,582 words) - 12:52, 13 March 2023
{{Tip|If you are using {{Pkg|sbctl}} then resigning of the files enrolled in its database is automatically done through the hook provided at {{ic|/us
21 KB (3,250 words) - 12:39, 7 May 2023
...iles inside the boot partition. Normally computers come with keys that are enrolled by vendors (OEM). However these can be removed and allow the computer to en
65 KB (9,708 words) - 09:32, 30 May 2023