(In reply to Martin Abele from comment #7) > Is it a chicken - egg problem? With ask-pin option the pin is not valid > because the TPM was wiped and without the option, the system insists to > provide the recovery pin... > > What command is used to enroll the TPM during the installation or during > firstboot respectively? I think it’s more likely your claim that you’re resetting or clearing your TPM is false/incorrect, or incomplete If you compare the logs from comments #4 and #6 you see evidence of different event log entries which should be impossible if the system is booting the same OS each time with a clear TPM Are you sure you’re clearing the TPM each time, and not booting into any other OS? (Dell maintenance/recovery tools would count as a different OS)