clevis-luks-report - Man Page

clevis luks report -d DEV -s SLT

The clevis luks report command checks a given slot of a LUKS device and reports whether the pin bound to it — if any — has been rotated.

• -d DEV : The bound LUKS device
• -s SLT : The slot or key slot number for the pin to be verified
• -q : Quiet mode. If used, we will not prompt whether to regenerate the binding with clevis luks regen
• -r : Regenerates LUKS metadata with clevis luks regen -q -d DEV -s SLT

Check whether the pin bound to slot 1 in /dev/sda1 has been rotated:

# clevis luks report -d /dev/sda1 -s 1

clevis-luks-regen(1)