TPM decrypt problem with kernel 6.4.11

Ask Fedora
,
1

Hi

I have a root partition encrypted with luks2 and separate boot partition that used to be unlocked with tpm using systemd-cryptenroll. but after updating with kernel 6.4.11 it hangs on boot (waits around 20 seconds) and then asks for password. likely problem with tpm.

also running systemd-cryptenroll again gives error while in kernel 6.4.10 it doesn’t

sudo systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=7 /dev/nvme0n1p6 
🔐 Please enter current passphrase for disk /dev/nvme0n1p6: ********                
ERROR:tcti:src/tss2-tcti/tcti-device.c:451:Tss2_Tcti_Device_Init() Failed to open specified TCTI device file /dev/tpmrm0: No such file or directory 
Failed to initialize TCTI context: tcti:IO failure

Update: same on the kernel 6.4.12

1 Like
2

I am having the same issue. I had to roll back to kernel 6.4.10 for TPM devices to show up in /dev.

1 Like
3

Apparently it’s a wider kernel issue with tpm_crb, the folks from Nix are experiencing this as well:

4

Update 2: fixed with kernel 6.4.15