diff --git a/initrd/bin/kexec-select-boot b/initrd/bin/kexec-select-boot
index edf3abba7..d3c97b57e 100755
--- a/initrd/bin/kexec-select-boot
+++ b/initrd/bin/kexec-select-boot
@@ -69,7 +69,9 @@ if [ "$CONFIG_TPM2_TOOLS" = "y" ]; then
 			}
 	else
 		warn "Hash of TPM2 primary key handle does not exist"
-		warn "Please rebuild the boot hash tree"
+		warn "Please rebuild the TPM2 primary key handle by settings a default OS to boot."
+		warn "Select Options-> Boot Options -> Show OS Boot Menu -> <Pick OS> -> Make default"
+		#TODO: Simplify/Automatize TPM2 firmware upgrade process. Today: upgrade, reboot, reseal(type TPM owner pass), resign, boot
 		default_failed="y"
 		DEBUG "Hash of TPM2 primary key handle does not exist under $PRIMHASH_FILE"
 	fi