diff --git a/man/systemd-cryptenroll.xml b/man/systemd-cryptenroll.xml
index dfc6d31cf4b..c687ac31bb1 100644
--- a/man/systemd-cryptenroll.xml
+++ b/man/systemd-cryptenroll.xml
@@ -650,6 +650,51 @@
+
+ Credentials
+
+ systemd-cryptenroll supports the service credentials logic as implemented by
+ ImportCredential=/LoadCredential=/SetCredential=
+ (see systemd.exec5 for
+ details). The following credentials are used when passed in:
+
+
+
+ cryptenroll.passphrase
+ cryptenroll.new-passphrase
+
+ May contain the passphrase to unlock the volume with/to newly enroll.
+
+
+
+
+
+ cryptenroll.tpm2-pin
+ cryptenroll.new-tpm2-pin
+
+ May contain the TPM2 PIN to unlock the volume with/to newly enroll.
+
+
+
+
+
+ cryptenroll.fido2-pin
+
+ If a FIDO2 token is enrolled this may contain the PIN of the token.
+
+
+
+
+
+ cryptenroll.pkcs11-pin
+
+ If a PKCS#11 token is enrolled this may contain the PIN of the token.
+
+
+
+
+
+
Exit status