Re: [PATCH 02/11] libnvdimm/security: change clear text nvdimm keys to encrypted keys
On 11/12/18 11:49 AM, Mimi Zohar wrote:
On Mon, 2018-11-12 at 08:42 -0700, Dave Jiang wrote:
> How does one generate new encrypted keys with the system masterkey
> removed from the keyring?
I don't think you can.
Are there any documentations available showing system master-key usages?
So far the docs (i.e. EVM setup) I've seen generates a trusted master
key and then create the encrypted keys from that. I'm missing the
understanding of how to generate encrypted keys from the system master
key initially during setup. Thanks!