LOCK ALL ACCESS - INSTANT DRIVE ENCRYPTION.

This is what I am looking for: A programm/system that works just like TrueCrypt that

  • encrypts the WHOLE drive and ALL partitions on-th-fly
  • prevents unauthorized access to any part of the drive (even by federal forces)
  • uses PRE-BOOT-AUTHENTICATION (possibly with fingerprint-support)
  • Graphical interface for good handling

Which software would you guys recommend?
I really don´t know - but I´d like to know that ALL of my data is inaccessible if the drive gets stolen or analyzed by forensic investigators. :wink:

TheMask.

TheMask wrote:

> This is what I am looking for: A programm/system that works just like
> TrueCrypt that
>
> - encrypts the WHOLE drive and ALL partitions on-th-fly
> - prevents unauthorized access to any part of the drive (even by
> federal forces)
> - uses PRE-BOOT-AUTHENTICATION (possibly with fingerprint-support)
> - Graphical interface for good handling
>
> Which software would you guys recommend? dmcrypt? I really don´t know -
> but I´d like to know that ALL of my data is inaccessible if the drive
> gets stolen or analyzed by forensic investigators. :wink:

After installation:
http://en.opensuse.org/Encrypted_Root_File_System_with_SUSE_HOWTO

During installation:
“encrypted root file system on LVM”
http://lizards.opensuse.org/2009/03/18/encrypted-root-file-system-on-lvm/
(I’m still working on having my machine accept that for the first boot)

Feature request:
#305633: Support installation with encrypted root file system”
https://features.opensuse.org/305633

Kind regards,
Andreas Stieger

Well thanks for your reply - I really appreciate your effort.

You’ve posted two good descriptions on how get full disc encryption working with OpenSuse 11.1 - but there’s another problem: The computer I want to encrypt uses a 320 GB drive - all partitions are set up nicely and the system runs just like a charm.
Things is: I don’t want to resize all of my partitions or delete any data that’s been stored so far. Is there a way to get full drive encryption even without messing with the data and moving/resizing any of the existing partitions?

Sure, I could wipe my disc, re-install OpenSuse and create new partitions and all that - but that would take (I hate to say it again) AGES. :frowning:

TheMask.

TheMask wrote:

> You’ve posted two good descriptions on how get full disc encryption
> working with OpenSuse 11.1 - but there’s another problem: The computer I
> want to encrypt uses a 320 GB drive - all partitions are set up nicely
> and the system runs just like a charm.
> Things is: I don’t want to resize all of my partitions or delete any
> data that’s been stored so far. Is there a way to get full drive
> encryption even without messing with the data and moving/resizing any of
> the existing partitions?

If you think about it a bit you’ll arrive at the obvious solution: At some
point, you will have to remove unencrypted data from your disk, and replace
it with an encrypted file system. Whether you do all that at once, or
gradually, is completely up to you.

Kind regards,
Andreas Stieger

Well thanks for replying again, but your last post doesn’t tell me anything usefull… :wink:
HOW do I “gradually” remove unecrypted data from my disc and HOW to “gradually” get the encryption system on there? Please give exact instructions.

TheMask.

TheMask wrote:

> HOW do I “gradually” remove unecrypted data from my disc and HOW to
> “gradually” get the encryption system on there? Please give exact
> instructions.

You’ll have to resize file systems, create partitions to contain the
encrypted file systems and move files over. Repeat. Now if you have lvm
that would be a bit easier.

Kind regards,
Andreas Stieger

AGAIN: Resizing is not a problem at all. All I need is a DEATAILED tutorial. Thanks, mate. :slight_smile:

TheMask.

PLEASE HELP - IT’S URGENT!

TheMask.