Changes

Jump to: navigation, search

Linux: Full Disk Encryption

304 bytes added, 11:47, 1 July 2019
/* Automated Decryption */
* BIOS: 09/17/2018 American Megatrends Inc. FLT2.0.46.01.00
* TPM: Firmware based TPM 2.0 implementation (fTPM)
* Clevis: 11-2
== Installation ==
</pre>
* Download and apply the patch:
$ wget https://fit-iot.com/files/download/fitlet2/sw/tools/Linux-ftpm2.0/module-setup.sh.diff
$ patch -p1 /usr/lib/dracut/modules.d/60clevis/module-setup.sh module-setup.sh.diff
* Regenerate the iniramfs image with clevis modules to decrypt the root filesystem during early boot. You need to do this once:
* Restart your machine, encrypted disk will be decrypted automatically and you will reach the login prompt
$ reboot
 
== See also ==
* Original article: [https://techrevelations.de/2019/02/04/tpm-encryption-in-fedora-linux/ TPM Encryption in Fedora]
<br>
 
[[category:software]]
[[category:Application notes]]
[[category:fitlet2]]
425
edits