Category: Security

Using TPM 2.0 on Ubuntu 26.04 to unlock LUKS encrypted volumes during boot

Published on Author admin

Check if SecureBoot is enabled: mokutil --sb-state Detecting the TPM 2.0 device: sudo systemd-cryptenroll --tpm2-device=list Enrolling the hardware token, binding to PCRs 0 and 7: sudo systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=0+7 /dev/nvme0n1p3 verify: sudo systemd-cryptenroll /dev/nvme0n1p3 show LUKS keyslots: sudo cryptsetup luksDump /dev/nvme0n1p3 verify used PCRs: sudo cryptsetup luksDump --dump-json-metadata /dev/nvme0n1p3 | grep tpm2-pcrs -A 3 Append… Continue reading Using TPM 2.0 on Ubuntu 26.04 to unlock LUKS encrypted volumes during boot →

Enabling TRIM for LUKS encrypted USB disk

Published on Author admin

Change prisivioning model to unmap to enable TRIM for USB disk: echo unmap > /sys/block/sda/device/scsi_disk/*/provisioning_mode verify settings: # cat /sys/block/sda/device/scsi_disk/*/provisioning_mode unmap during LUKS volumen mounting add --allow-discards: cryptsetup luksOpen --allow-discards /dev/sda encrypted_disk verify, both device and encrypted volume should shows non-zero values: # lsblk --discard /dev/sda NAME             DISC-ALN DISC-GRAN… Continue reading Enabling TRIM for LUKS encrypted USB disk →