3 ms·
After hibernating or shutting down my laptop, I need to enter the password for the disk encryption again. It's a long, secure password, and I hate entering it.
by mr_mitm 2y ago
After hibernating or shutting down my laptop, I need to enter the password for the disk encryption again. It's a long, secure password, and I hate entering it. Now that my new laptop does not support S3 anymore and the battery does not last one night in S0ix, I have to enter it every morning, and I constantly mistype because I don't see what I'm typing. I'm considering changing it to something less secure because of this. TPM without PIN is not allowed by my employer, and TMP with PIN is not supported on Linux AFAIK.
- bmicraft 2y agoTPM with pin is definitely supported[1] by systemd-cryptenroll on linux: > It is possible to require a PIN to be entered in addition to the TPM state being correct. Simply add the option --tpm2-with-pin=yes to the command above and enter the PIN when prompted. [1] https://wiki.archlinux.org/title/Systemd-cryptenroll#Trusted_Platform_Module https://wiki.archlinux.org/title/Systemd-cryptenroll#Trusted...
- mr_mitm 2y agoThanks, maybe I was just too stupid then. I messed around with dracut and gave up when the system stopped booting. Fixed it while cursing all this complexity and got back to actual work.