systemd-cryptenroll(1) on Linux
The text 9c25780aff96, as Debian 12 (Bookworm) shipped it.
Enroll PKCS#11, FIDO2, TPM2 token/devices to LUKS2 encrypted volumes
Flags it lists
-
--fido2-credential-algorithm -
--fido2-device -
--fido2-with-client-pin -
--fido2-with-user-presence -
--fido2-with-user-verification -
--help -
--password -
--pkcs11-token-uri -
--recovery-key -
--tpm2-device -
--tpm2-with-pin -
--unlock-key-file -
--version -
-h