-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Wed, Apr 05, 2017 at 05:31:38PM -0600, FHDATA wrote: > > > hello, > > I am not currently using debian as linux OS but > considering it ... > > > If I clean install debian (latest of course) and during > the install process have its / (system drive) > encrypted with pass-phrase .... > > then later on, can I add a key, residing on > a usb flash drive, to that encryption?
I assume the encryption will be LUKS based (the default here). LUKS supports several key slots (8 if I remember correctly), and cryptsetup's man page mentions a luksAddKey command, so it should be possible. I haven't tried it myself yet, though. Regards - -- tomás -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iEYEARECAAYFAljl5cwACgkQBcgs9XrR2kbgHgCfXHiAR6e20YFiQVF/GEsFFGFZ JvIAmQG0rGx5bPXpPHZNbCYLniXw5yuO =2wzk -----END PGP SIGNATURE-----