21.13. Binding a Stratis pool to TPM

Prerequisites

• Stratis v2.3.0 or later is installed and the stratisd service is running. For more information, see Installing Stratis.
• An encrypted Stratis pool is created, and you have the key description of the key that was used for the encryption. For more information, see Creating an encrypted Stratis pool using a key in the kernel keyring.
• Your system supports TPM 2.0.

Procedure

• Bind an encrypted Stratis pool to TPM:

  # stratis pool bind tpm my-pool

  my-pool

  Specifies the name of the encrypted Stratis pool.

  key-description

  References the key that exists in the kernel keyring, which was generated when you created the encrypted Stratis pool.