Can you make Pop!_OS disk encryption use TPM?

Asudox@lemmy.world to Linux@lemmy.ml – 33 points –
39

You are viewing a single comment

Ubuntu (on which Pop!_OS is based) only added support for TPM disk encryption in Ubuntu 23.10, so my guess is that you'll have to wait for Pop!_OS 24.04

Note that, as I understand it, using TPM will only protect data on your encrypted disk if it is removed from your computer. If someone steals your entire computer, the disk will be decrypted on boot.

There are plenty of ways to do TPM backed FDE on earlier Ubuntu. They're just not officially supported. Clevis is one of the easier ways.

The disk will be decrypted on boot, but then they'll have to contend with needing a password to log in

1 more...

Guess I'll wait for COSMIC DE's alpha release then. It should come with Pop!_OS 24.04

1 more...