PSA: If you have a LUKS encrypted system and a TPM2 chip, you can put it to good use

• sedutil

  1 72 0.0 C++

  Use sedutil for setting up and using self encrypting drives (SEDs) that comply with the TCG OPAL 2.00 standard. This includes the requisite pre-boot authentication image. (by ladar)

would it also be possible to decrypt a self encrypted drive this way with the tpm on boot?

• clevis

  25 811 6.2 Shell

  Automated Encryption Framework

  

We use clevis against multiple tang servers to provide Network Bound Disk Encryption (NBDE). It's possible to also use TPM2 but it's easier to use multiple tang servers (requiring more than one server to decrypt) in the datacenter.

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• tang

  11 453 7.1 C

  Tang binding daemon

  

We use clevis against multiple tang servers to provide Network Bound Disk Encryption (NBDE). It's possible to also use TPM2 but it's easier to use multiple tang servers (requiring more than one server to decrypt) in the datacenter.

Suggest a related project