diff --git a/src/tpm2-setup/nvpcr/cryptsetup.nvpcr.in b/src/tpm2-setup/nvpcr/cryptsetup.nvpcr.in
index acec95206f..3f01ef34eb 100644
--- a/src/tpm2-setup/nvpcr/cryptsetup.nvpcr.in
+++ b/src/tpm2-setup/nvpcr/cryptsetup.nvpcr.in
@@ -1,5 +1,6 @@
 {
     "name" : "cryptsetup",
     "algorithm" : "sha256",
-    "nvIndex" : {{TPM2_NVPCR_BASE + 1}}
+    "nvIndex" : {{TPM2_NVPCR_BASE + 1}},
+    "priority" : 700
 }
diff --git a/src/tpm2-setup/nvpcr/hardware.nvpcr.in b/src/tpm2-setup/nvpcr/hardware.nvpcr.in
index ddeb7f99e5..bb4a3afa69 100644
--- a/src/tpm2-setup/nvpcr/hardware.nvpcr.in
+++ b/src/tpm2-setup/nvpcr/hardware.nvpcr.in
@@ -1,5 +1,6 @@
 {
     "name" : "hardware",
     "algorithm" : "sha256",
-    "nvIndex" : {{TPM2_NVPCR_BASE + 0}}
+    "nvIndex" : {{TPM2_NVPCR_BASE + 0}},
+    "priority" : 500
 }
diff --git a/src/tpm2-setup/nvpcr/verity.nvpcr.in b/src/tpm2-setup/nvpcr/verity.nvpcr.in
index b4fb62bd76..7d1630d6cd 100644
--- a/src/tpm2-setup/nvpcr/verity.nvpcr.in
+++ b/src/tpm2-setup/nvpcr/verity.nvpcr.in
@@ -1,5 +1,6 @@
 {
     "name" : "verity",
     "algorithm" : "sha256",
-    "nvIndex" : {{TPM2_NVPCR_BASE + 2}}
+    "nvIndex" : {{TPM2_NVPCR_BASE + 2}},
+    "priority" : 300
 }