diff --git a/man/systemd-cryptenroll.xml b/man/systemd-cryptenroll.xml
index 6ca850e0ef..cea2072c47 100644
--- a/man/systemd-cryptenroll.xml
+++ b/man/systemd-cryptenroll.xml
@@ -391,13 +391,22 @@
PCRConfigures the TPM2 PCRs (Platform Configuration Registers) to bind to when
- enrollment is requested via . Takes a list of PCR names or numeric
- indices in the range 0…23. Multiple PCR indexes are separated by +. If not
- specified, the default is to use PCR 7 only. If an empty string is specified, binds the enrollment to
- no PCRs at all. See the table above for a list of available PCRs.
+ enrollment is requested via . Takes a list of PCR entries, where each
+ entry starts with a name or numeric index in the range 0…23, optionally followed by
+ : and a hash algorithm name (specifying the PCR bank), optionally followed by
+ = and a hash digest value. Multiple PCR entries are separated by
+ +. If not specified, the default is to use PCR 7 only. If an empty string is
+ specified, binds the enrollment to no PCRs at all. See the table above for a list of available
+ PCRs.
Example:
specifies that PCR registers 4, 1, and 5 should be used.
+ Example: specifies that PCR register 7 from the SHA256
+ bank should be used.
+ Example:
+ specifies that PCR register 4 from the SHA1 bank should be used, and a hash digest value of
+ 0x3A3F780F11A4B49969FCAA80CD6E3957C33B2275 will be used instead of reading the current PCR
+ value.