I want to encrypt my Netbooks HDD.
If I understand
http://kuparinen.org/martti/comp/ubuntu/en/cryptolvm.html correctly,
that is possible with the Alternate install CD.
But what I miss: Is it possible to put the key file onto a USB stick so
that it is loaded automatically from there at boot time? Long time ago,
I looked at the Gentoo initrd script, which apparently supports this.
A bit more sophisticated: Is it possible to put the whole boot partition
including the key file onto a USB drive?
I also found https://wiki.ubuntu.com/SmartCardLUKSDiskEncryption, which
sounds nice. Are there such smartcards in the form of a self-contained
USB device which I can put on my keyring?
Thanks,
Jens
Re: Full disk encryption: Key on USB storage device
Similar to your request, when I set up my netbook I used an second SD
card and during the install did a custom mount.
external SD mounted to / [root]
internal SD mounted to /home
was just playing with a similar solution where my "boot disk" was on a
mini sd. It worked just fine and easily. Don't imagine yours would
cause you any trouble if you added the encryption. Hope this helps. My
work was done on an Acer Aspireone.
Re: Full disk encryption: Key on USB storage device
Am 02/09/10 17:52, schrieb Fred Roller:
"second" SD card? Mine has a harddisk.
Re: Full disk encryption: Key on USB storage device
The original AspireOne netbook shipped with a soldered sd card instead
of a hdd to reduce power consumption. The OS of choice was a custom
linux build from Acer. To be used as a net book (i.e. things were some
where other than on your system) it worked pretty good. Very handy if
you trouble shoot networks and just need a quick access with a few tools.
Re: Full disk encryption: Key on USB storage device
Just have a look at http://www.truecrypt.org/
this is a great software for all your needs. i have been using this for a long time. its simply awesome.
Thanks!
Re: Full disk encryption: Key on USB storage device
Am 02/09/10 06:23, schrieb Swapnil Jain:
No, I certainly did not mean Truecrypt.
Jens
Re: Full disk encryption: Key on USB storage device
Am 02/08/10 22:56, schrieb Jens Müller:
http://www.ftsafe.com/products/reader601.html
"The cost of smart card reader is somewhat an obstruction while
considering smart card projects. Hopefully, with the implementation of
ISO7816-12, USB interfaced smart card are becoming popular and
availiable from more and more major smart card chip providers. "
So, _are_ there already some?
Re: Full disk encryption: Key on USB storage device
Could I add a follow-up question to this?
Is it possible to put the key or, better still, the boot partition and
the key on an SD card instead of USB stick? I'm pretty sure my laptop
can boot from built-in card reader - will check tomorrow :)