diff --git a/.gitignore b/.gitignore
index 1e58ee0..89f838c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1,2 @@
 /clevis-8.tar.bz2
+/clevis-9.tar.bz2
diff --git a/clevis.spec b/clevis.spec
index 6d17898..f219d4a 100644
--- a/clevis.spec
+++ b/clevis.spec
@@ -1,8 +1,8 @@
 %global _hardened_build 1
 
 Name:           clevis
-Version:        8
-Release:        2%{?dist}
+Version:        9
+Release:        1%{?dist}
 Summary:        Automated decryption framework
 
 License:        GPLv3+
@@ -22,6 +22,7 @@ BuildRequires:  dracut
 BuildRequires:  tang >= 6
 BuildRequires:  curl
 
+Requires:       tpm2-tools >= 3.0.0
 Requires:       coreutils
 Requires:       jose >= 8
 Requires:       curl
@@ -112,14 +113,17 @@ exit 0
 %license COPYING
 %{_bindir}/%{name}-decrypt-http
 %{_bindir}/%{name}-decrypt-tang
+%{_bindir}/%{name}-decrypt-tpm2
 %{_bindir}/%{name}-decrypt-sss
 %{_bindir}/%{name}-decrypt
 %{_bindir}/%{name}-encrypt-http
 %{_bindir}/%{name}-encrypt-tang
+%{_bindir}/%{name}-encrypt-tpm2
 %{_bindir}/%{name}-encrypt-sss
 %{_bindir}/%{name}
 %{_mandir}/man1/%{name}-encrypt-http.1*
 %{_mandir}/man1/%{name}-encrypt-tang.1*
+%{_mandir}/man1/%{name}-encrypt-tpm2.1*
 %{_mandir}/man1/%{name}-encrypt-sss.1*
 %{_mandir}/man1/%{name}-decrypt.1*
 %{_mandir}/man1/%{name}.1*
@@ -145,6 +149,9 @@ exit 0
 %attr(4755, root, root) %{_libexecdir}/%{name}-luks-udisks2
 
 %changelog
+* Tue Feb 13 2018 Nathaniel McCallum <npmccallum@redhat.com> - 9-1
+- Update to v9
+
 * Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 8-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
 
diff --git a/sources b/sources
index 19f9228..722b21f 100644
--- a/sources
+++ b/sources
@@ -1 +1,2 @@
 SHA512 (clevis-8.tar.bz2) = cbf14ae7f57facecbb86e61862f45d6d8f0969dc02cc0e3efaa3755f283966115f60e48741664c7503088a885ddca14d6356c38dbb0348e957dc7511c1d3acbf
+SHA512 (clevis-9.tar.bz2) = 4be5a9def457946d6abc4a68fa30a419d8f2214de18c8e036a0334af466c7f8d28fbe0129474ef4f10c3c071432ded94fc3d19efb2ff30a0e7d3afada835fdb8