Description of problem:

-> $ clevis luks bind -d UUID=74b39db4-4bf1-478b-828d-8f9e9db12df6 tpm2 '{"hash":"sha256","key":"rsa","pcr_bank":"sha256","pcr_ids":"0"}'
Enter existing LUKS password: 
No key available with this passphrase.
Enter existing LUKS password: 
Warning: Value 512 is outside of the allowed entropy range, adjusting it.
The tpm2 pin requires a tpm2-tools version between 3 and 5
Invalid input!
Usage: jose jwe fmt -i JWE [-I CT] [-o JWE] [-O CT] [-c]

Converts a JWE between serialization formats

  -i JSON --input=JSON     Parse JWE from JSON
  -i FILE --input=FILE     Read JWE from FILE
  -i -    --input=-        Read JWE from standard input

  -I FILE --detached=FILE  Read decoded ciphertext from FILE
  -I -    --detached=-     Read decoded ciphertext from standard input

  -o JSON --output=JSON    Parse JWE from JSON
  -o FILE --output=FILE    Read JWE from FILE
  -o -    --output=-       Read JWE from standard input
                           Default: "-"

  -O JSON --detach=JSON    Parse JWE from JSON
  -O FILE --detach=FILE    Read JWE from FILE
  -O -    --detach=-       Read JWE from standard input

  -c      --compact        Output JWE using compact serialization

Failed to import token from file.
Error saving metadata to LUKS2 header in device UUID=74b39db4-4bf1-478b-828d-8f9e9db12df6
Unable to update metadata; operation cancelled
Error adding new binding to UUID=74b39db4-4bf1-478b-828d-8f9e9db12df6


Version-Release number of selected component (if applicable):

Package tpm2-tools-5.0-9.el9.x86_64 is already installed.

How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info: