Crash to recovery post-install

Adam3394 · September 12, 2025, 2:32pm

https://paste.opensuse.org/pastes/dc7d011cec7a

arvidjaar · September 12, 2025, 5:26pm

Sep 12 10:28:46 localhost systemd-cryptsetup[1128]: Automatically discovered security TPM2 token unlocks volume.
Sep 12 10:28:48 localhost systemd-cryptsetup[1128]: WARNING:esys:src/tss2-esys/api/Esys_PolicyOR.c:286:Esys_PolicyOR_Finish() Received TPM Error
Sep 12 10:28:48 localhost systemd-cryptsetup[1128]: ERROR:esys:src/tss2-esys/api/Esys_PolicyOR.c:100:Esys_PolicyOR() Esys Finish ErrorCode (0x000001c4)
Sep 12 10:28:48 localhost systemd-cryptsetup[1128]: Failed to add OR policy to TPM: tpm:parameter(1):value is out of range or is not correct for the context
Sep 12 10:28:49 localhost systemd-cryptsetup[1128]: Failed to unseal secret using TPM2: State not recoverable
Sep 12 10:28:49 localhost systemd-cryptsetup[1128]: TPM2 operation failed, falling back to traditional unlocking: State not recoverable

As I already said in another topic it means that expected TPM state does not match the actual TPM state. You can try to re-enroll, see Quickstart in Full Disk Encryption with TPM and YaST2 - openSUSE News and scroll to the " Re-enrollment".

Adam3394 · September 12, 2025, 5:43pm

Success! I rebooted and encountered no FDE PW prompts. Thanks for your support, advice, and patience.