Changes

Linux: Full Disk Encryption

81 bytes added, 11:47, 1 July 2019

/* Automated Decryption */

* BIOS: 09/17/2018 American Megatrends Inc. FLT2.0.46.01.00

* TPM: Firmware based TPM 2.0 implementation (fTPM)

* Clevis: 11-2

== Installation ==

</pre>

* Download and apply the patch:

$ wget https://fit-iot.com/files/download/fitlet2/sw/tools/Linux-ftpm2.0/module-setup.sh.diff

$ patch -p1 /usr/lib/dracut/modules.d/60clevis/module-setup.sh module-setup.sh.diff

* Regenerate the iniramfs image with clevis modules to decrypt the root filesystem during early boot. You need to do this once:

425

edits