Clarify usage of --tpm2-with-pin=no in documentation
This commit is contained in:
@@ -612,7 +612,7 @@ $ sudo systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=0+7 --tpm2-public-key
|
||||
|
||||
> [!WARNING]
|
||||
> It is recommended to use a pin to unlock the TPM, instead of allowing it to unlock automatically, for more security.
|
||||
> Use `--tpm2-with-pin=no` **ONLY** if you think that touchless tpm unlocking is acceptable (this is also the default option).
|
||||
> Use `--tpm2-with-pin=no` **only** if you are comfortable with TPM unlocking without user interaction (this is the default behavior).
|
||||
|
||||
```
|
||||
Additional Flags
|
||||
|
||||
Reference in New Issue
Block a user