LUKS devices bound to TPM2 are not decrypted anymore after boot

Solution Verified - Updated 2022-09-23T06:03:29+00:00 -

Issue

After installing a system through the network and kickstart with a %post script to automatically unlock the LUKS devices through TPM2, the LUKS devices do not get automatically unlocked
After installing a system using the DVD and kickstart with a %post script to automatically unlock the LUKS devices through TPM2, the LUKS devices do not get automatically unlocked
Booting a system which has its LUKS devices bound to TPM2 doesn't get its devices unlocked automatically anymore even though this was working in the past

Red Hat Enterprise Linux 8
- LUKS used for root devices
- Clevis TPM2 decryption

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.