SomeBoyo@feddit.de to Selfhosted@lemmy.worldEnglish · 1 year agoWhat do you use to mount encrypted drives on boot?message-squaremessage-square15fedilinkarrow-up136arrow-down10
arrow-up136arrow-down1message-squareWhat do you use to mount encrypted drives on boot?SomeBoyo@feddit.de to Selfhosted@lemmy.worldEnglish · 1 year agomessage-square15fedilink
minus-squareakash_rawal@lemmy.worldlinkfedilinkEnglisharrow-up2·1 year agoTPM stores the encryption key against secure boot. That way, if attacker disables/alters secure boot then TPM won’t unseal the key. I use clevis to decrypt the drive.
TPM stores the encryption key against secure boot. That way, if attacker disables/alters secure boot then TPM won’t unseal the key. I use clevis to decrypt the drive.