Linux encryption compliance policy

Question

Hello,

I created a compliance policy to check the encryption status on Linux device, my issue is we have Linux devices not encrypted with LUKS before installation.

As per this documentation, it is possible to encrypt Linux volumes after installation using encryptsetup tool.

I searched for encryptsetup tool and I found that it is only encrypt Home folder. However, I followed up the instruction to encrypt Home folder but the device still non-compliant.

How to encrypt Linux devices without re-installation ?

Thanks,

Alaa Elrayes

Answer 1

@Alaa Elrayes,Thanks for posting in Q&A.

From your description, I know you want to encrypt Linux devices without re-installation to meet the compliance policy.

Based on my research, if you already have Ubuntu installed without any encryption, then full disk encryption with LUKS may not be an option.

And if you use the encryptsetup tool to only encrypt Home folder, but not encrypt the writable fixed disks on this computer, it may not meet the compliance policy settings. Therefore, it is suggested that you re-install the Linux devices and encrypt Linux devices during the installation to meet the compliance policy.

Hopa above information can be helpful.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.