for those of you using Full Disk Encryption on your computers, do you store the encryption key on your computer’s Trusted Platform Module? or is it in some other place like an external key or something like a LUKS header?
Timeline
Post
Remote status
Context
1@cell i store the primary ones in my head. primary means it’s either the key for the only disk in the system, or it’s the one that temporarily unlocks a key storage containing keys for multiple luks volumes (that storage may be on an external device)
TPMs have proven unreliable too many times (may lose keys)
Replies
0
No replies yet.