From 6a5c3b6a9bc2e24c3cc5dba72756c8030535b51a Mon Sep 17 00:00:00 2001 From: Joel Mathew Thomas Date: Wed, 4 Jun 2025 23:05:02 +0530 Subject: [PATCH] Clarify usage of --tpm2-with-pin=no in documentation --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 9e3aa91..a2d04a1 100644 --- a/README.md +++ b/README.md @@ -612,7 +612,7 @@ $ sudo systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=0+7 --tpm2-public-key > [!WARNING] > It is recommended to use a pin to unlock the TPM, instead of allowing it to unlock automatically, for more security. -> Use `--tpm2-with-pin=no` **ONLY** if you think that touchless tpm unlocking is acceptable (this is also the default option). +> Use `--tpm2-with-pin=no` **only** if you are comfortable with TPM unlocking without user interaction (this is the default behavior). ``` Additional Flags