It seems after the rename of the file the enrollment no longer works. localhost:~ # systemd-cryptenroll /dev/nvme0n1p2 No longer shows a TPM entry.