GitHub - andbanman/luksTpmKey: Use TPM2.0 device to store LUKS key and retrive during cryptsetup

Branches Tags

Name		Name	Last commit message	Last commit date
Latest commit History 6 Commits
README		README
create_tpm_key.sh		create_tpm_key.sh
decrypt_tpm_key		decrypt_tpm_key
get_tpm_key.sh		get_tpm_key.sh

Repository files navigation

Based off the blog https://run.tournament.org.il/ubuntu-18-04-and-tpm2-encrypted-system-disk/

Written for Ubuntu 18.04, but should be general since it uses standard tools from tpm2-tools package. Newer versions could/should use clevis-tpm2.

Appropriate for one-off uses that don't need to manage any other TPM resources.

INSTRUCTIONS

1. Modify create_tpm_key.sh parameters
2. sudo ./create_tpm_key.sh
3. Folow remaining instructions, modify to suit system