Re: Disk auto-unlocking with TPM 2.0

On 7/30/23 13:59, Martin Winter wrote:

Gary Lin wrote:

...

Hi, I'm pleased to introduce a new feature for openSUSE Tumbleweed: disk auto-unlocking with TPM 2.0. In short, it boots the encrypted root without asking for a passphrase.

What is the actual use case for that?

In guest encrypted cloud images is one use case. Later, Robert I'm encrypting my disk to protect it in case the Notebook gets stolen or otherwise lost. When it is auto-unlocked, everybody with access to my computer can read the data.

Or am I missing something? Is there another protection mechanism before the disk is unlocked?

-- Robert Schweikert MAY THE SOURCE BE WITH YOU Distinguished Engineer LINUX rjschwei@suse.com IRC: robjo