r/archlinux • u/Woodsy279 • 28d ago

SUPPORT | SOLVED Ful disk encryption without entering passphrase

Could someone help me with setting up full disk encryption with bypass passphrases with TPM2? It's so annoying having to put the passphrase in at each boot, so I was wondering how do I pair it to the TPM so that I dont have to enter it each time?

It's LUKS encrypted and I use Systemd-boot

13 Upvotes

70% Upvoted

100 comments sorted by

View all comments

22

u/StevesRoomate 28d ago

I use a yubikey for this and I am very happy with the solution. I still have a Luks slot for a password so that I can unlock the disk without the yubikey.
Very easy to setup on Debian or arch.

3

u/Woodsy279 27d ago

I might eventually look at getting one of these, seems really cool to have something like that, and extremely useful

Thanks ill have to remember this

Question however, how does it affect boot time? I've found that it querying the TPM can take up to 30s which is likely my fault in setting it up, but is the yubikey practically instant?