savchenko
savchenko
@debasish-mihup, `medium.en` and _"long enough to run for many minutes"_.
Waveform screenshot to check the separation: 
OK, if we begin looking at external sources, perhaps drafting a response to https://flatkill.org/ would be a good start?
Can you try with `{"pcr_ids": "0,1,2,3,5,7,8,9"}`?
@cole-seph-work , perhaps consider [5, 7 and 8](https://link.springer.com/chapter/10.1007/978-1-4302-6584-9_12) as well? **P.S.** You might find this useful: https://github.com/savchenko/debian/wiki/tpm2-@-libvirt,-Clevis
> 0,1,4 What's the machine spec and can you reproduce this reliably? Ping @sergio-correia re. contribution. `0,1,4` is rather benign combination, are you booting with CSM disabled?
Hold on. Why not to set password on GRUB?
What's the output of `sudo tpm2_pcrread`?
@latchset, the issue can probably be closed.
Not quite following. Assuming the machine is physically in your possession: 1. `TPM_ForceClear()` via UEFI interface 2. Provision Clevis > someone with access to the tpm and an encrypted drive...