aboutsummaryrefslogtreecommitdiffstats
path: root/conf/ykfde.conf
blob: 7c25314c73bd40398c55c9813f52aba0648e2d22 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
[general]
# Specify what Yubikey slot to use for full disk encryption.
# This is just the system default, you can configure one or more
# Yubikeys below.
# The specified slot has to be configured for HMAC-SHA1.
yk slot = 2

# This is the LUKS device. Make sure you use the name, not
# block device, e.g. it has to match first column of
# /etc/crypttab.initramfs.
device name = crypt

# Do we use second factor? This setting controls wheter or not
# support is added to initramfs.
second factor = yes

# For every Yubikey in use add a section here.
# * 'yk slot' is optional and only required for keys differing
#   from system default.
# * 'luks slot' is required to make sure one Yukikey is associated
#   with exactly one LUKS slot!
#[1234567]
#yk slot = 1
#luks slot = 1