Re: Question related to FDE (Full Disk Encryption) solution under Linux Debian Lenny

[Juha Tuuna <juha.tuuna@iki.fi>]

On 19.1.2011 9:21, Thomas Nguyen Van wrote:
> Good evening,
> 
> Our company needs to encrypt hard drives on our machines running under Linux
> Debian Lenny.
> Seagate proposes FDE solutions with Momentus 5400 and/or 7200
> (http://www.seagate.com/docs/pdf/fr-FR/whitepaper/mb595_2_momentus_fde_sed_ii_sq_kit.pdf)
> 
> This solution is very interesting because the password or the passphrase is
> not stored on the hard drive but in the BIOS in their case. So that a server
> can reboot without any human intervention.
> 
> However, this solution only works under windows !! They don't plan to support
> under linux such a disk. :o(
> So my question is : could you suggest another FDE solution compliant with a
> Lenny distribution?

Hi, you can check this out: http://tldp.org/HOWTO/Encrypted-Root-Filesystem-HOWTO/

Also, when installing a fresh Lenny, the installer program let's you encrypt
the root partition. This is a very easy and simple way to do it. Just needs an
unencrypted /boot but there's hardly any sensitive or secret information there.

-- 
Juha Tuuna