diff --git a/src/cryptenroll/cryptenroll.c b/src/cryptenroll/cryptenroll.c
index e5ddec6311..3fb58c2874 100644
--- a/src/cryptenroll/cryptenroll.c
+++ b/src/cryptenroll/cryptenroll.c
@@ -199,11 +199,11 @@ static int help(void) {
                "     --password        Enroll a user-supplied password\n"
                "     --recovery-key    Enroll a recovery key\n"
                "\n%3$sPKCS#11 Enrollment:%4$s\n"
-               "     --pkcs11-token-uri=URI\n"
-               "                       Specify PKCS#11 security token URI\n"
+               "     --pkcs11-token-uri=URI|auto|list\n"
+               "                       Enroll a PKCS#11 security token or list them\n"
                "\n%3$sFIDO2 Enrollment:%4$s\n"
-               "     --fido2-device=PATH\n"
-               "                       Enroll a FIDO2-HMAC security token\n"
+               "     --fido2-device=PATH|auto|list\n"
+               "                       Enroll a FIDO2-HMAC security token or list them\n"
                "     --fido2-salt-file=PATH\n"
                "                       Use salt from a file instead of generating one\n"
                "     --fido2-parameters-in-header=BOOL\n"
@@ -217,8 +217,8 @@ static int help(void) {
                "     --fido2-with-user-verification=BOOL\n"
                "                       Whether to require user verification to unlock the volume\n"
                "\n%3$sTPM2 Enrollment:%4$s\n"
-               "     --tpm2-device=PATH\n"
-               "                       Enroll a TPM2 device\n"
+               "     --tpm2-device=PATH|auto|list\n"
+               "                       Enroll a TPM2 device or list them\n"
                "     --tpm2-device-key=PATH\n"
                "                       Enroll a TPM2 device using its public key\n"
                "     --tpm2-seal-key-handle=HANDLE\n"