doublez13

Automatic unlocking of a LUKS device on RHEL using the TPM with systemd-cryptenroll

NOTE: clevis-luks is the offical method of TPM LUKS unlocking on RHEL, but this method works fine on RHEL 9 and 10 and is far simpler (in my opinion).

1. Install the TPM userspace utilities

yum install -y tpm2-tools tpm2-tss

2. Dump the PCR values. Pick slots to bind the LUKS key unlocking to. Different values meet different threat models.

doublez13

Test your Linux Command Skills

Red Hat Arcade: Command Line Heroes

Command	Description	Provided By
[	alias for test	Coreutils
b2sum	compute and check BLAKE2 message digest	Coreutils
base32	base32 encode/decode data and print to standard output	Coreutils
base64	base64 encode/decode data and print to standard output	Coreutils
basename	strip directory and suffix from filenames	Coreutils