DM-Crypt Archive on lore.kernel.org
 help / color / mirror / Atom feed
From: Arno Wagner <arno@wagner.name>
To: dm-crypt@saout.de
Subject: Re: [dm-crypt] Remote Passphrase management
Date: Fri, 1 Jul 2011 12:01:51 +0200	[thread overview]
Message-ID: <20110701100151.GA6533@tansi.org> (raw)
In-Reply-To: <BANLkTinDU-vUCVyk5sSdEhYG8jr4_Q-_GQ@mail.gmail.com>

Hi Karan,

there is no passphrase reset function. However you can
set multiple passphrases with LUKS and can, e.g.,
put a recovery passphrase in a specific slot. You 
can then make a header backup and store it in a database,
in order to be able to reinstall that recovery passphrase. 
With ssh as root to the laptops, you can do
this remotely and, as allways on Linux/Unix,
scripted. There really is not need for a special
"tool".

Arno


On Fri, Jul 01, 2011 at 10:14:05AM +0530, karna singh wrote:
> Hi,
> 
> Is there any integration which can be done with Dmcrypt setup so as to get
> the passphrase reset function through a central management tool.
> We need to roll out laptops in huge number.
> laptop OS 64 Bit Ubuntu 10.04 LTS.
> 
> -- 
> BR/
> *Karan*

> _______________________________________________
> dm-crypt mailing list
> dm-crypt@saout.de
> http://www.saout.de/mailman/listinfo/dm-crypt


-- 
Arno Wagner, Dr. sc. techn., Dipl. Inform., CISSP -- Email: arno@wagner.name 
GnuPG:  ID: 1E25338F  FP: 0C30 5782 9D93 F785 E79C  0296 797F 6B50 1E25 338F
----
Cuddly UI's are the manifestation of wishful thinking. -- Dylan Evans

If it's in the news, don't worry about it.  The very definition of 
"news" is "something that hardly ever happens." -- Bruce Schneier 

  reply	other threads:[~2011-07-01 10:01 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2011-07-01  4:44 [dm-crypt] Remote Passphrase management karna singh
2011-07-01 10:01 ` Arno Wagner [this message]
2011-07-02 20:17   ` karna singh

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20110701100151.GA6533@tansi.org \
    --to=arno@wagner.name \
    --cc=dm-crypt@saout.de \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox