From a962459f15ffa9292933055d614a886a3f0c7d17 Mon Sep 17 00:00:00 2001 From: cvlc12 <97767846+cvlc12@users.noreply.github.com> Date: Fri, 20 Mar 2026 19:06:26 +0100 Subject: [PATCH] Readme: Revise LUKS recovery key instructions Updated instructions for adding a recovery key to a LUKS partition using `systemd-cryptenroll` and `/dev/disk/by-designator/root-luks` No need to use `/dev/disk/..` --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index b123202e..0bed5a51 100644 --- a/README.md +++ b/README.md @@ -216,7 +216,7 @@ systemd-sysinstall(8) man page for details. systemd doesn't support adding a recovery key to a partition enrolled with a token only (tpm/fido2). It is possible to use cryptenroll to add a recovery password -to the root partition: `cryptsetup luksAddKey --token-type systemd-tpm2 /dev/` +to the root partition: `systemd-cryptenroll --unlock-tpm2-device auto --recovery-key /dev/disk/by-designator/root-luks` ## Firmwares