Systemd-boot cannot unlock LUKS anymore

English Install/Boot/Login
1

Hi

several TW machines with systemd-boot and automated LUKS decryption via TPM loose their keys, requiring manual LUKS key input.

Must have started roughly 2 weeks ago after an update, not sure which.

Reenrollment via sdbootutil works for a few hours/days, then looses it again.

Any idea what causes this and how to prevent it?

Many thanks!

Best

2

Provide the full output of

journactl -b --system --full --no-pager

after such boot where TPM unlock failed. Upload to the https://paste.opensuse.org/