3 ms·
What method/program are you talking about? Does it support FDE? Is it reasonably supported with the methods expected by end users (fingerprint, face, smartcard,
by SahAssar 10mo ago
What method/program are you talking about? Does it support FDE? Is it reasonably supported with the methods expected by end users (fingerprint, face, smartcard, etc.)?
Everytime I've tried its been finicky and had to use non-standard tools to get it working.
- KAMSPioneer 10mo agoI'm a different commenter but yeah, solutions exist. For example systemd-cryptenroll let's you use a FIDO token (or TPM or PKCS#11 smartcard) to unlock your encrypted disk and it's very easy to set up. Quite literally a single command. Windows Hello serves the same purpose for Windows, though I'm sure there are caveats/differences.
- SahAssar 10mo agoIf it's a fido hardware token you still need to make sure you have a backup token. It's a lot simpler on windows/macos where you can use biometrics for the same purpose.
- slashdave 10mo agoYou can setup multiple keys. It would be crazy not to include a simple ascii hash key in addition.