https://bugzilla.suse.com/show_bug.cgi?id=1228863 https://bugzilla.suse.com/show_bug.cgi?id=1228863#c21 --- Comment #21 from Martin Abele <happymab.dev@outlook.com> --- (In reply to Alberto Planas Dominguez from comment #15)
(In reply to Martin Abele from comment #0)
- sudo sdbootutil update-predictions
This should fail, as the predictions cannot be updated if the current state is invalid
- sudo sdbootutil --ask-pin update-predictions
This should work. If it didn't we need to debug this. I will try to reproduce it, but with the PIN you can rewrite the TPM policy always.
- Clear TPM in BIOS and run sudo sdbootutil --ask-pin update-predictions
This will never work. Once the TPM is clear, there is no policy, pin or anything that can be used. You need to fully re-enroll the system.
(I will update https://en.opensuse.org/Portal:MicroOS/FDE#Re-enrollment with more updated information later this week=
Hi Alberto, The re-enrollment as described in https://en.opensuse.org/Portal:MicroOS/FDE#Re-enrollment worked for me as well. My system boots without asking for a password or recovery key again. Thanks a lot for providing this description. -- You are receiving this mail because: You are on the CC list for the bug.