Show Table of Contents
29.5. Common Post-Installation Tasks
The following sections are about common post-installation tasks.
29.5.1. Set a randomly generated key as an additional way to access an encrypted block device
These sections are about generating keys and adding keys.
29.5.1.1. Generate a key
This will generate a 256-bit key in the file
$HOME/keyfile.
dd if=/dev/urandom of=$HOME/keyfile bs=32 count=1 chmod 600 $HOME/keyfile
29.5.1.2. Add the key to an available keyslot on the encrypted device
cryptsetup luksAddKey <device> ~/keyfile
29.5.2. Add a new passphrase to an existing device
cryptsetup luksAddKey <device>
After being prompted for any one of the existing passphrases for authentication, you will be prompted to enter the new passphrase.
29.5.3. Remove a passphrase or key from a device
cryptsetup luksRemoveKey <device>
You will be prompted for the passphrase you wish to remove and then for any one of the remaining passphrases for authentication.
Where did the comment section go?
Red Hat's documentation publication system recently went through an upgrade to enable speedier, more mobile-friendly content. We decided to re-evaluate our commenting platform to ensure that it meets your expectations and serves as an optimal feedback mechanism. During this redesign, we invite your input on providing feedback on Red Hat documentation via the discussion platform.