Hi Richard, Many thanks for your help and the information! This seems to imply : Enable/disable TPM in firmware may refer to enable/disable it to use tpm for measure boot (ie SRTM) but not to enable/disable the device. Hi Hansi, Would it be it possible for you to double check the result on your side ? Just drop me a line if you are ok. JFYI. The test package is available at: > https://download.opensuse.org/repositories/home:/michael-chang:/bsc:/1202438/openSUSE_Tumbleweed/ The test grub.efi can be extracted from rpm directly and manually replace it on ESP. > wget https://download.opensuse.org/repositories/home:/michael-chang:/bsc:/1202438/openSUSE_Tumbleweed/noarch/grub2-x86_64-efi-2.06-36.5.noarch.rpm > unrpm grub2-x86_64-efi-2.06-36.5.noarch.rpm > cp /boot/efi/EFI/opensuse/grub.efi /boot/efi/EFI/opensuse/grub.efi.backup > cp $PWD/usr/share/grub2/x86_64-efi/grub.efi /boot/efi/EFI/opensuse/grub.efi Please note you have to disable secure boot to test, otherwise grub.efi will be rejected given it was not signed by SUSE key but was built from my home project. Thanks.