Messages in this thread | | | Subject | Re: [PATCH 02/11] libnvdimm/security: change clear text nvdimm keys to encrypted keys | From | Dave Jiang <> | Date | Mon, 12 Nov 2018 13:13:37 -0700 |
| |
On 11/12/18 11:49 AM, Mimi Zohar wrote: > On Mon, 2018-11-12 at 08:42 -0700, Dave Jiang wrote: > >> How does one generate new encrypted keys with the system masterkey >> removed from the keyring? > > I don't think you can.
Are there any documentations available showing system master-key usages? So far the docs (i.e. EVM setup) I've seen generates a trusted master key and then create the encrypted keys from that. I'm missing the understanding of how to generate encrypted keys from the system master key initially during setup. Thanks!
| |