diff --git a/src/root/tpm-enroll.service b/src/root/tpm-enroll.service
index 562c0f6..7fe12ec 100644
--- a/src/root/tpm-enroll.service
+++ b/src/root/tpm-enroll.service
@@ -3,7 +3,7 @@ Description=TPM Enrollment Service
 
 [Service]
 Type=oneshot
-ExecStart=systemd-cryptenroll --tpm2-device=auto <ROOT> --tpm2-pcrs=7 && rm /etc/systemd/system/tpm-enroll.service
+ExecStart=bash -c "systemd-cryptenroll --tpm2-device=auto <ROOT> --tpm2-pcrs=7 && rm /etc/systemd/system/tpm-enroll.service"
 SetCredential=cryptenroll.passphrase:<PASSPHRASE>
 User=root