diff --git a/sources/news/20230908 Ubuntu 23.10 to Feature Experimental TPM-backed Full Disk Encryption.md b/sources/news/20230908 Ubuntu 23.10 to Feature Experimental TPM-backed Full Disk Encryption.md new file mode 100644 index 0000000000..1bee45df69 --- /dev/null +++ b/sources/news/20230908 Ubuntu 23.10 to Feature Experimental TPM-backed Full Disk Encryption.md @@ -0,0 +1,90 @@ +[#]: subject: "Ubuntu 23.10 to Feature Experimental TPM-backed Full Disk Encryption" +[#]: via: "https://news.itsfoss.com/ubuntu-23-10-disk-encryption/" +[#]: author: "Sourav Rudra https://news.itsfoss.com/author/sourav/" +[#]: collector: "lujun9972/lctt-scripts-1693450080" +[#]: translator: " " +[#]: reviewer: " " +[#]: publisher: " " +[#]: url: " " + +Ubuntu 23.10 to Feature Experimental TPM-backed Full Disk Encryption +====== +Moving forward, Ubuntu will let you utilize TPM-backed Full Disk +Encryption. But, is this something you would like? +Ubuntu 23.10 daily builds keep getting exciting new additions! + +Earlier we had covered the [major PPA changes][1], and the new [Flutter-based store][2] (which also landed with the latest daily builds). + +Now, we have yet another major change that is set to enhance the security of Ubuntu systems; by changing how users handle the encrypting of their disks (if enabled). + +The initial support for the feature is set to arrive with Ubuntu 23.10 and will be improved in future Ubuntu releases. + +**Suggested Read** 📖 + +![][3] + +### Ubuntu 23.10: TPM-backed Full Disk Encryption + +![][4] + +Introduced as **an experimental feature** , TPM-backed Full Disk Encryption (FDE) is a major change from how Ubuntu has been handling FDE for the past 15 years. + +**In the existing system** , a passphrase mechanism was in place, that would authenticate users by accepting a user-set phrase that would then be used to provide access to the disk. + +All of this was made possible due to the integration of the **[Linux Unified Key Setup][5]** (LUKS) framework, which handles disk encryption at the block level. + +**With the TPM-backed system** , the TPM chip on your motherboard will be used to provide full disk encryption, doing away with the need for a passphrase. + +The **chip will handle the decryption of the secret key** that locks the full EFI state, and the kernel command line. That is only possible when the device boots with software that has been defined as ' **authorized** ' to access confidential data. + +📋 + +TPM stands for [Trusted Platform Module][6]. + +**But, there's a catch.** + +TPM-backed FDE is based on the [same architecture][7] as [Ubuntu Core][8], this has resulted in the sharing of many key components that are **delivered as snap packages**. So, things such as the **bootloader** (shim/GRUB) and **kernel assets** are delivered via snap. + +Luckily, this new **TPM-backed FDE is not the only way of encrypting disks**. The **conventional passphrases system will still be in place** , for those who don't want to use the new system. + +Users can also use the new system alongside passphrases to further bolster their security. + +For technical details on how TPM-backed disk encryption works, I suggest you go through Ubuntu's [official blog][9] post. + +**Interested in testing this out?** 🤔 + +🚧 + +Testing any experimental feature could result in total data loss. So, try it at your own risk. + +Well, TPM-backed FDE has been rolled out into the [**daily builds**][10] of **Ubuntu 23.10** , you just have to set it up during installation as shown in the screenshot in the article. + +The new FDE option is available under ' **Advanced Features** ' during the selection of the type of install on the Ubuntu installer. + +_💬 What do you think of this new experimental feature? Share your thoughts in the comments below._ + +* * * + +-------------------------------------------------------------------------------- + +via: https://news.itsfoss.com/ubuntu-23-10-disk-encryption/ + +作者:[Sourav Rudra][a] +选题:[lujun9972][b] +译者:[译者ID](https://github.com/译者ID) +校对:[校对者ID](https://github.com/校对者ID) + +本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创编译,[Linux中国](https://linux.cn/) 荣誉推出 + +[a]: https://news.itsfoss.com/author/sourav/ +[b]: https://github.com/lujun9972 +[1]: https://news.itsfoss.com/ubuntu-23-10-ppa/ +[2]: https://news.itsfoss.com/ubuntu-23-10-ubuntu-store/ +[3]: https://news.itsfoss.com/content/images/size/w256h256/2022/08/android-chrome-192x192.png +[4]: https://news.itsfoss.com/content/images/2023/09/Ubuntu_23.10_TPM_FDE.png +[5]: https://en.wikipedia.org/wiki/Linux_Unified_Key_Setup +[6]: https://en.wikipedia.org/wiki/Trusted_Platform_Module +[7]: https://ubuntu.com/core/docs/uc20/full-disk-encryption +[8]: https://ubuntu.com/core +[9]: https://ubuntu.com/blog/tpm-backed-full-disk-encryption-is-coming-to-ubuntu +[10]: https://cdimage.ubuntu.com/daily-live/current/