On Fri, Dec 08, 2017 at 05:07:39PM +0100, Paul Menzel wrote: > I have no access to the system right now, but want to point out, that the > log was created by `journactl -k`, so I do not know if that messes with the > time stamps. I checked the output of `dmesg` but didn’t see the TPM error > messages in the output – only `tpm_tis MSFT0101:00: 2.0 TPM (device-id 0xFE, > rev-id 4)`. Do I need to pass a different error message to `dmesg`? It is a good question, I don't know.. If your kernel isn't setup to timestamp messages then the journalstamp will certainly be garbage. No idea why you wouldn't see the messages in dmesg, if they are not in dmesg they couldn't get into the journal Jason