|
|
|
@ -41,7 +41,7 @@ All of the below instructions should be executed as root: |
|
|
|
1. Install required tools |
|
|
|
`apt install binutils tpm2-tools` |
|
|
|
2. Create a new secret for disk encryption: |
|
|
|
`tpm2_getrandom 32 -o /root/secret.bin` |
|
|
|
`tpm2_getrandom 32 -o /root/keys/fde-secret.bin` |
|
|
|
3. Add the key to disk encryption |
|
|
|
`cryptsetup luksAddKey /dev/nvme0n1p3 /root/keys/fde-secret.bin` |
|
|
|
4. Create a primary key in the Endorsement Hierarchy |
|
|
|
|
