---
name: "clevis-luks-regen"
section: "1"
platform: "linux"
package: "clevis"
version: "22-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/clevis-luks-regen"
---

# clevis-luks-regen(1)

Regenerates a clevis binding

## NAME

clevis-luks-regen - Regenerates a clevis binding

## SYNOPSIS

**clevis luks regen** \[-q\] -d DEV -s SLT

## OVERVIEW

The **clevis luks regen** command regenerates the clevis binding for a given slot in a LUKS device, using the same configuration of the existing binding. Its operation can be compared to performing **clevis luks unbind** and **clevis luks bind** for rebinding said slot and device. This is useful when rotating tang keys.

## OPTIONS

• **-d** *DEV* : The bound LUKS device

• **-s** *SLT* : The slot or key slot number for rebinding. Note that it requires that such slot is currently bound by clevis.

• **-q**: Do not prompt for confirmation.

## EXAMPLE

```
Let's start by using clevis luks list to see the current binding configuration in /dev/sda1:
```

```
# clevis luks list -d /dev/sda1
1: tang '{"url":"http://tang.server"}'
2: tpm2 '{"hash":"sha256","key":"ecc"}'
```

```
We see that slot 1 in /dev/sda1 has a tang binding with the following configuration:
'{"url":"http://tang.server"}'
```

```
Now let's do the rebinding of slot 1:
# clevis luks regen -d /dev/sda1 -s 1
```

```
After a successful operation, we will have the new binding using the same configuration that was already in place.
```

## SEE ALSO

[**clevis-luks-list**(1)](/clevis-luks-list/1.md) [**clevis-luks-bind**(1)](/clevis-luks-bind/1.md) [**clevis-luks-unbind**(1)](/clevis-luks-unbind/1.md)