In user space Full Disk Encryption (FDE), as opposed to the boot loader based FDE, developers for openSUSE supported signed policy and NVIndex policy from the beginning when Trusted Platform Module 2 (TPM2) is used.
This topic is from https://news.opensuse.org/2026/03/11/dropping-pcr-oracle/. To continue the conversation or ask questions about it, please join the mailing list or post a new topic in the appropriate forum section.