9.13. Configuring automated unlocking of a LUKS-encrypted removable storage device

Procedure

1. Install the clevis-udisks2 package:

   # dnf install clevis-udisks2

2. Restart the system, and then perform the binding step using the clevis luks bind command as described in Configuring NBDE clients for automated unlocking of LUKS-encrypted volumes, for example:

   # clevis luks bind -d /dev/sdb1 tang '{"url":"http://tang.srv"}'

Verification

1. The LUKS-encrypted removable device can be now unlocked automatically in your GNOME desktop session.

2. The device bound to a Clevis policy can be also unlocked by the clevis luks unlock command, for example:

   # clevis luks unlock -d /dev/sdb1