Saturday, July 5, 2014

Full Disk Encryption with Key Disk on OpenBSD

Just some notes to myself on how to setup full disk encryption with a key disk on OpenBSD. Pretty much http://tildedennis.blogspot.com/2013/08/full-disk-encryption-on-openbsd.html and http://www.undeadly.org/cgi?action=article&sid=20110530221728.

1. Boot into install shell

2.

cd /dev
sh ./MAKEDEV sd1

3. 

fdisk -i wd0
fdisk -i sd1 (key disk)

3. 

disklabel -E wd0
disklabel -E sd1

a a (RAID)
w
q

4. bioctl -C force -c C -l /dev/wd0a -k /dev/sd1a softraid0


install (use crypto disk, sd2)