diff --git a/changelog/changes/2024-03-28-systemd-cryptenroll.md b/changelog/changes/2024-03-28-systemd-cryptenroll.md
new file mode 100644
index 0000000000..a3ce8c5629
--- /dev/null
+++ b/changelog/changes/2024-03-28-systemd-cryptenroll.md
@@ -0,0 +1 @@
+- Added support for unlocking the rootfs with a TPM set up by systemd-cryptenroll ([bootengine#93](https://github.com/flatcar/bootengine/pull/93))
diff --git a/sdk_container/src/third_party/coreos-overlay/sys-kernel/bootengine/bootengine-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/sys-kernel/bootengine/bootengine-9999.ebuild
index 79f4e0d85d..0db1969d1b 100644
--- a/sdk_container/src/third_party/coreos-overlay/sys-kernel/bootengine/bootengine-9999.ebuild
+++ b/sdk_container/src/third_party/coreos-overlay/sys-kernel/bootengine/bootengine-9999.ebuild
@@ -10,7 +10,7 @@ CROS_WORKON_REPO="https://github.com"
 if [[ "${PV}" == 9999 ]]; then
 	KEYWORDS="~amd64 ~arm ~arm64 ~x86"
 else
-	CROS_WORKON_COMMIT="357ca18d4b7e9dcca6070e08874e2e2824858c2a" # flatcar-master
+	CROS_WORKON_COMMIT="6c2fba412dbce9a011535a9e57332e1307072855" # flatcar-master
 	KEYWORDS="amd64 arm arm64 x86"
 fi