# trustedboot This is a description how to enable full disk encryption where the key is managed by a tpm.