diff --git a/man/pam_systemd_loadkey.xml b/man/pam_systemd_loadkey.xml index becb32adcd..13d1686bd1 100644 --- a/man/pam_systemd_loadkey.xml +++ b/man/pam_systemd_loadkey.xml @@ -49,9 +49,47 @@ keyname= Takes a string argument which sets the keyname to read. - The default is cryptsetup, which is used by + The default is cryptsetup. + During boot, systemd-cryptsetup@.service8 - to store LUKS passphrase during boot. + stores a passphrase or PIN in the keyring. + The LUKS2 volume key can also be used, via the option in + crypttab5. + + + + Possible values for <varname>keyname</varname>. + + + + + + + + Value + Description + + + + + cryptsetup + Passphrase or recovery key + + + fido2-pin + Security token PIN + + + luks2-pin + LUKS2 token PIN + + + tpm2-pin + TPM2 PIN + + + +
@@ -78,6 +116,7 @@ -auth optional pam_systemd_loadkey.so +-auth optional pam_gnome_keyring.so -session optional pam_gnome_keyring.so auto_start -session optional pam_kwallet5.so auto_start