Comment # 21 on bug 1228863 from Martin Abele

(In reply to Alberto Planas Dominguez from comment #15)
> (In reply to Martin Abele from comment #0)
>  
> > - sudo sdbootutil update-predictions
> 
> This should fail, as the predictions cannot be updated if the current state
> is invalid
> 
> > - sudo sdbootutil --ask-pin update-predictions
> 
> This should work. If it didn't we need to debug this. I will try to
> reproduce it, but with the PIN you can rewrite the TPM policy always.
> 
> > - Clear TPM in BIOS and run sudo sdbootutil --ask-pin update-predictions
> 
> This will never work. Once the TPM is clear, there is no policy, pin or
> anything that can be used.  You need to fully re-enroll the system.
> 
> (I will update https://en.opensuse.org/Portal:MicroOS/FDE#Re-enrollment with
> more updated information later this week=

Hi Alberto,
The re-enrollment as described in
https://en.opensuse.org/Portal:MicroOS/FDE#Re-enrollment worked for me as well.
My system boots without asking for a password or recovery key again. Thanks a
lot for providing this description.