Changes

Jump to: navigation, search

Linux: Full Disk Encryption

340 bytes added, 11:47, 1 July 2019
/* Automated Decryption */
* BIOS: 09/17/2018 American Megatrends Inc. FLT2.0.46.01.00
* TPM: Firmware based TPM 2.0 implementation (fTPM)
* Clevis: 11-2
== Installation ==
</pre>
* Download and apply the patch:
$ wget https://fit-iot.com/files/download/fitlet2/sw/tools/Linux-ftpm2.0/module-setup.sh.diff
$ patch -p1 /usr/lib/dracut/modules.d/60clevis/module-setup.sh module-setup.sh.diff
* Regenerate the iniramfs image with clevis modules to decrypt the root filesystem during early boot. You need to do this once:
$ cryptsetup luksDump /dev/sda3
* Restart your machine, encrypted disk will be decrypted automaticallyand you will reach the login prompt $ reboot == See also ==* Original article: [https://techrevelations.de/2019/02/04/tpm-encryption-in-fedora-linux/ TPM Encryption in Fedora]<br> [[category:software]][[category:Application notes]][[category:fitlet2]]
425
edits