Linux OS drives, on the fly encryption changes

Need to get a single image encrypted and then distribute and then change the encryption on the fly -- sure you can do it...

 

Yes, that confirmed as working...

So, here is what we do.

1. Create the encryption with a basic password
2. Use the image for  each consultant
3. When you give a consultant an image to use, A) add a new encryption key to the OS, and reboot and test it.. if that works, then B) remove the original encryption key and reboot, C) to test reboot and try the original keyphrase and that should fail, and the new passphrase should work only.

 

You can have multiple encryption keys on an encrypted drive from what I found

For me the sda5 is hard drive partition.. the cat command will tell you what to change.

 

First, you need to find out which is the encrypted LVM partition, it may be sda3, but it can also be sda5, sdX2, ...:

cat /etc/crypttab

Toadd a new password, use luksAddKey:

sudo cryptsetup luksAddKey /dev/sda3

Toremove an existing password, use luksRemoveKey:

sudo cryptsetup luksRemoveKey /dev/sda3

View currently used slots of the encrypted partition:

sudo cryptsetup luksDump /dev/sd3

https://askubuntu.com/questions/109898/how-to-change-the-password-of-an-encrypted-lvm-system-done-with-the-alternate-i

 

All the Best,

 

Andy, MBA Technology Management, Bachelor’s Computer Systems Engineering

(775)287-9552 PST

Mountain Computers Inc.

https://mountaincomputers.org

http://mountainpublishing.org

 

Our #1 utility we created is the GoGreen PC TuneUp™. Plus! our blog called myBlog and VLog shares our knowledge. The Work Order describes our flow. Happy Clients ask and ye shall receive our news. Andy Flagg, our leading technologist; Microsoft retired 1997, a Worldwide Operations Technical Manager, continues to help thousands daily.