Found something interesting, what apparently worked for me. From this thread: https://bbs.archlinux.org/viewtopic.php?pid=2162935#p2162935 To get out of the lockout mode (with clear) without BIOS you can try: > echo 5 | sudo tee /sys/class/tpm/tpm0/ppi/request reboot. > tpm2_dictionarylockout -Tdevice:/dev/tpmrm0 --setup-parameters --max-tries=5 --clear-lockout after that > systemd-cryptenroll --tpm2-device=auto /dev/nvme0n1p2