GUID=$(
  fwupdmgr get-devices |
    grep -A 6 -E "fingerprint" |
    grep -i "GUID" |
    awk -F ': ' '{print $2}' |
    awk '{print $1}'
  );
clear && echo "fwupdmgr get-devices $GUID" && fwupdmgr get-devices $GUID

# make sure the PAM fingerprint module is enabled in the pam TUI:
sudo pam-auth-update