Differences

This shows you the differences between two versions of the page.

--- public:unlocking_debian_luks_with_a_yubikey_at_boot [2024/03/20 09:47] – thomas
+++ public:unlocking_debian_luks_with_a_yubikey_at_boot [2024/03/22 23:20] (current) – thomas
@@ Line 1: / Line 1: @@
 ====== Unlocking Debian LUKS with a Yubikey at boot ======
+You can use a Yubikey to unlock a Debian system at boot. For general info on managing LUKS, see [[public:managing_luks_on_debian|]].
 ===== On the Yubikey =====
@@ Line 82: / Line 84: @@
 ===== Optional: bypass the passphrase =====
-:!: If you bypass the passphrase, you'll only rely on something you have, and not something you know. This is less secure, but can be preferred in some environments where interaction is not feasible.
+:!: If you bypass the passphrase, you'll only rely on something you have, and not something you know. **I strongly advise against this** as it is less secure, but it can be preferred in some environments where interaction is not feasible.
 Open ''/etc/ykluks.cfg'' and append the following line:
@@ Line 98: / Line 100: @@
 https://packages.debian.org/unstable/yubikey-luks \\
 https://www.endpointdev.com/blog/2022/03/disk-decryption-yubikey/
+{{tag>Debian LUKS Yubikey}}