I’m dual-booting Fedora 14 with Windows 7. I have the Fedora installation on a separate hard disk and chose to do full-disk encryption during setup. Can I have the boot-up query a USB flash drive for the disk key during startup, instead of requiring the key to be entered manually?

2 Answers

1. 
   

   
   

   Indigo on Apr 28, 2011

   Out of the box, Fedora does not support what you want to do. Storing and securing the key on the flash drive is the easy part. There is the not so easy part of writing the script that will query an external device at boot time for the encryption key.

   0 Votes 0 Votes  0 Votes

2. 
   

   
   

   finid on Apr 28, 2011

   That would be an interesting configuration. I’m sure it’s possible, but I have not seen it done on Fedora. It does bring up a set of question: How secure will the key be on the flash drive? Will the flash drive itself be encrypted so as to protect the key in case the flash is lost or stolen?

   0 Votes 0 Votes  0 Votes