diff --git a/README.md b/README.md index 9e3aa91..a2d04a1 100644 --- a/README.md +++ b/README.md @@ -612,7 +612,7 @@ $ sudo systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=0+7 --tpm2-public-key > [!WARNING] > It is recommended to use a pin to unlock the TPM, instead of allowing it to unlock automatically, for more security. -> Use `--tpm2-with-pin=no` **ONLY** if you think that touchless tpm unlocking is acceptable (this is also the default option). +> Use `--tpm2-with-pin=no` **only** if you are comfortable with TPM unlocking without user interaction (this is the default behavior). ``` Additional Flags