29.5. Common Post-Installation Tasks
The following sections are about common post-installation tasks.
29.5.1. Set a randomly generated key as an additional way to access an encrypted block device Copy linkLink copied to clipboard!
Copy linkLink copied to clipboard!
These sections are about generating keys and adding keys.
29.5.1.1. Generate a key Copy linkLink copied to clipboard!
Copy linkLink copied to clipboard!
This will generate a 256-bit key in the file
$HOME/keyfile
.
dd if=/dev/urandom of=$HOME/keyfile bs=32 count=1 chmod 600 $HOME/keyfile
dd if=/dev/urandom of=$HOME/keyfile bs=32 count=1
chmod 600 $HOME/keyfile
29.5.1.2. Add the key to an available keyslot on the encrypted device Copy linkLink copied to clipboard!
Copy linkLink copied to clipboard!
cryptsetup luksAddKey <device> ~/keyfile
cryptsetup luksAddKey <device> ~/keyfile
29.5.2. Add a new passphrase to an existing device Copy linkLink copied to clipboard!
Copy linkLink copied to clipboard!
cryptsetup luksAddKey <device>
cryptsetup luksAddKey <device>
After being prompted for any one of the existing passphrases for authentication, you will be prompted to enter the new passphrase.
29.5.3. Remove a passphrase or key from a device Copy linkLink copied to clipboard!
Copy linkLink copied to clipboard!
cryptsetup luksRemoveKey <device>
cryptsetup luksRemoveKey <device>
You will be prompted for the passphrase you wish to remove and then for any one of the remaining passphrases for authentication.