Can't encrypt the boot partition otherwise no kernel available to run the decryption :-)<br><br>I ran Fedora 8 with added drive encryption. No problem (the first install was tedious but it all worked fine). I then up0graded that laptop to Fedora 9. During the install it recognized the encrypted drive, prompted for the password for the key, unlocked and upgraded flawlessly (OK - So I had previously removed all the Livna repo multimedia stuff to avoid headaches).<br>
<br>Later backed off personal data, wiped the drive and installed F9 from scratch. No problems. Just reworked the machine from scratch with F10 64-bit as I upgraded to 4GB ram. Once the bios patch went on the box has performed well. No flawlessly - there are bugs in the suspend, hibernate, power-management and the gnome session manager is rather unstable (Grr!). But the disk encryption is has been so far rock solid.<br>
<br>Admin on a disk encryption is a bigger challenge. Must have a backup of the keys and know the encryption scheme and also must know the password. Current scheme allows multiple passwords so there can be an admin user and other normal users. So normal users can boot the box without knowing the admin password.<br>
<br>Disk encryption is/will-be a big thing to be comfortable working with. <br><br><div class="gmail_quote">On Sat, Nov 29, 2008 at 12:42 PM, Scott Castaline <span dir="ltr"><<a href="mailto:hscast@charter.net">hscast@charter.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Just want to get a feel for the pros and cons of encrypting my disk(s).<br>
I just created a VM to install Fedora 10 before upgrading my system. I<br>
chose to use the encryption option to see how it worked in the install<br>
process and how it behaves once installed. I did notice that the boot<br>
partition cannot be encrypted. Is this just a Fedora thing or is that<br>
the encryption key is not present until the initial boot process is<br>
completed? So what are the pros and the cons to this?<br>
<br>
TIA<br>
Scott<br>
_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
</blockquote></div><br><br clear="all"><br>-- <br>-- <br>James P. Kinney III <br><br>