asudox to [email protected] • 1 year agoCan you make Pop!_OS disk encryption use TPM?message-square50arrow-up133arrow-down11
arrow-up132arrow-down1message-squareCan you make Pop!_OS disk encryption use TPM?asudox to [email protected] • 1 year agomessage-square50
minus-squareBlackEcolinkfedilinkEnglish15•edit-21 year agoUbuntu (on which Pop!_OS is based) only added support for TPM disk encryption in Ubuntu 23.10, so my guess is that you’ll have to wait for Pop!_OS 24.04 Note that, as I understand it, using TPM will only protect data on your encrypted disk if it is removed from your computer. If someone steals your entire computer, the disk will be decrypted on boot.
minus-square@[email protected]linkfedilink7•1 year agoThere are plenty of ways to do TPM backed FDE on earlier Ubuntu. They’re just not officially supported. Clevis is one of the easier ways.
minus-square@kn33linkEnglish3•1 year agoThe disk will be decrypted on boot, but then they’ll have to contend with needing a password to log in
minus-square@[email protected]linkfedilinkEnglish8•1 year agoUnless recovery (single user) mode is enabled. If it is, you can boot right into a root shell from the bootloader.
minus-squareasudoxOPlink1•1 year agoGuess I’ll wait for COSMIC DE’s alpha release then. It should come with Pop!_OS 24.04
Ubuntu (on which Pop!_OS is based) only added support for TPM disk encryption in Ubuntu 23.10, so my guess is that you’ll have to wait for Pop!_OS 24.04
Note that, as I understand it, using TPM will only protect data on your encrypted disk if it is removed from your computer. If someone steals your entire computer, the disk will be decrypted on boot.
There are plenty of ways to do TPM backed FDE on earlier Ubuntu. They’re just not officially supported. Clevis is one of the easier ways.
The disk will be decrypted on boot, but then they’ll have to contend with needing a password to log in
Unless recovery (single user) mode is enabled. If it is, you can boot right into a root shell from the bootloader.
Guess I’ll wait for COSMIC DE’s alpha release then. It should come with Pop!_OS 24.04