Bug 11070

Summary: whole-disk encryption
Product: [Yocto Project Subprojects] IoT Reference OS Kit Reporter: Patrick Ohly <patrick.ohly>
Component: intel-iot-refkit-securityAssignee: Patrick Ohly <patrick.ohly>
Status: RESOLVED FIXED QA Contact:
Severity: enhancement    
Priority: Medium CC: matti-pekka.sivosuo, mikko.ylinen
Version: unspecified   
Target Milestone: 2.3 M4   
Hardware: x86   
OS: x86_64   
Whiteboard:
OS type for building Yocto: --- Type of Regression: ---
Verified: Documentation change: No (bug/feature does not impact docs)
Bug Depends on: 11071, 11276    
Bug Blocks: 11072, 11205    

Description Patrick Ohly 2017-02-17 13:38:16 UTC 
Reference Kit must provide mechanism based on whole-disk encryption to store data in a secure manner.

The proposed solution uses per-machine key stored in TPM NVRAM. The encrypted disk gets set up by the installer image.
Comment 1 Patrick Ohly 2017-03-03 16:53:08 UTC 
Missing: automated tests, documentation
Comment 2 Patrick Ohly 2017-03-31 10:15:03 UTC 
See https://github.com/intel/intel-iot-refkit/pull/97 for the code, documentation and tests under review at the moment.
Comment 3 Mikko Ylinen 2017-04-18 13:07:30 UTC 
Resolving on behalf of Patrick.