2

I'm a proud Suser. I'm about to reinstall 12.2 on my ASUS N76VZ (UEFI x64 laptop).

Since I'm very sensitive about laptop security against theft or unwanted inspection, I chose to use BitLocker with USB dongle in Windows 7.

When installing Suse the last time I found that only the home partition (separated from root) was capable of being encrypted.

Does Suse offer a full disk encryption solution like BitLocker that I haven't discovered yet? Or is encrypting home partition the only way to protect data?

Encrypting only home is feasible as one stores personal data in home, but I still would like to encrypt the whole thing!

Also, using a hardware token (no TPM available) for unlocking is preferred to password, if possible!

Mechanical snail
  • 7,963
  • 5
  • 48
  • 67
usr-local-ΕΨΗΕΛΩΝ
  • 4,862

1 Answers1

1

The LVM option in YaST partitioner setup fullfills all my requirements, though it's password based and not token-based.

The YaST partitioner allows you to choose the option to propose a partitioning based on encrypted LVM. This takes full disk and automatically assigns volume names.

It creates an unencrypted boot drive (/boot), a LVM partition which is encrypted, and within that partition one or more volumes assigned to partitions.

Answering from an encrypted linux...

usr-local-ΕΨΗΕΛΩΝ
  • 4,862