How do I set up TPM 2.0 on Ubuntu 18.04?
I just can't seem to find enough information on Trusted Platform Module (TPM). I did find a few threads but they're only about TPM 1.2 setup.
The setup I want: the whole disk is encrypted (including free space) and the key is saved in TPM so it's not prompted on bootup. I only have to enter the password once at the login screen.
This is how it is done on Windows currently.
My questions are:
When to set up the TPM: during the initial installation stage, or afterwards?
How to set up TPM? I read abouttpm-toolsandtrousersbut only for TPM 1.2?
Has anybody successfully set up TPM 2.0, and any detailed instructions?
encryption tpm
add a comment |
I just can't seem to find enough information on Trusted Platform Module (TPM). I did find a few threads but they're only about TPM 1.2 setup.
The setup I want: the whole disk is encrypted (including free space) and the key is saved in TPM so it's not prompted on bootup. I only have to enter the password once at the login screen.
This is how it is done on Windows currently.
My questions are:
When to set up the TPM: during the initial installation stage, or afterwards?
How to set up TPM? I read abouttpm-toolsandtrousersbut only for TPM 1.2?
Has anybody successfully set up TPM 2.0, and any detailed instructions?
encryption tpm
add a comment |
I just can't seem to find enough information on Trusted Platform Module (TPM). I did find a few threads but they're only about TPM 1.2 setup.
The setup I want: the whole disk is encrypted (including free space) and the key is saved in TPM so it's not prompted on bootup. I only have to enter the password once at the login screen.
This is how it is done on Windows currently.
My questions are:
When to set up the TPM: during the initial installation stage, or afterwards?
How to set up TPM? I read abouttpm-toolsandtrousersbut only for TPM 1.2?
Has anybody successfully set up TPM 2.0, and any detailed instructions?
encryption tpm
I just can't seem to find enough information on Trusted Platform Module (TPM). I did find a few threads but they're only about TPM 1.2 setup.
The setup I want: the whole disk is encrypted (including free space) and the key is saved in TPM so it's not prompted on bootup. I only have to enter the password once at the login screen.
This is how it is done on Windows currently.
My questions are:
When to set up the TPM: during the initial installation stage, or afterwards?
How to set up TPM? I read abouttpm-toolsandtrousersbut only for TPM 1.2?
Has anybody successfully set up TPM 2.0, and any detailed instructions?
encryption tpm
encryption tpm
edited Jan 7 at 6:36
clearkimura
3,83611954
3,83611954
asked Sep 10 '18 at 10:29
brewdogbrewdog
211
211
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
Searching for similar question, I found a well documented guide, only for fresh install case with LUKS, using libs from https://github.com/tpm2-software/ which are made/supported by Intel (and others), and officially distributed on Ubuntu.
https://github.com/vchatterji/tpm2-luks
However, I didn't find any information at all to setup TPM 2.0 with an already existing LUKS/LVM volume...
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "89"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1073909%2fhow-do-i-set-up-tpm-2-0-on-ubuntu-18-04%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Searching for similar question, I found a well documented guide, only for fresh install case with LUKS, using libs from https://github.com/tpm2-software/ which are made/supported by Intel (and others), and officially distributed on Ubuntu.
https://github.com/vchatterji/tpm2-luks
However, I didn't find any information at all to setup TPM 2.0 with an already existing LUKS/LVM volume...
add a comment |
Searching for similar question, I found a well documented guide, only for fresh install case with LUKS, using libs from https://github.com/tpm2-software/ which are made/supported by Intel (and others), and officially distributed on Ubuntu.
https://github.com/vchatterji/tpm2-luks
However, I didn't find any information at all to setup TPM 2.0 with an already existing LUKS/LVM volume...
add a comment |
Searching for similar question, I found a well documented guide, only for fresh install case with LUKS, using libs from https://github.com/tpm2-software/ which are made/supported by Intel (and others), and officially distributed on Ubuntu.
https://github.com/vchatterji/tpm2-luks
However, I didn't find any information at all to setup TPM 2.0 with an already existing LUKS/LVM volume...
Searching for similar question, I found a well documented guide, only for fresh install case with LUKS, using libs from https://github.com/tpm2-software/ which are made/supported by Intel (and others), and officially distributed on Ubuntu.
https://github.com/vchatterji/tpm2-luks
However, I didn't find any information at all to setup TPM 2.0 with an already existing LUKS/LVM volume...
answered Nov 2 '18 at 22:25
rducomrducom
1012
1012
add a comment |
add a comment |
Thanks for contributing an answer to Ask Ubuntu!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1073909%2fhow-do-i-set-up-tpm-2-0-on-ubuntu-18-04%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown