Coursera Flash Sale
40% Off Coursera Plus for 3 Months!
Grab it
Learn to implement secure full-disk encryption for TPM-equipped edge devices through this 34-minute conference talk from the Linux Foundation's Open Source Summit. Explore a comprehensive open-source framework that balances robust security with practical scalability for IoT deployments. Discover how to establish a fully verified boot chain from EFI firmware through initramfs, including which system components require verification and common implementation pitfalls to avoid. Master a newly-developed open-source TPM PCR prediction mechanism that enables seamless reboots following kernel or initramfs updates. Understand automated disk encryption key onboarding and recovery processes using Tang and Clevis technologies. Examine secure remote access and fleet observability solutions that function even while disks remain locked, utilizing WireGuard, SSH, and Prometheus. Gain practical guidance on extending initramfs with dracut and custom tooling. Address potential security risks and system shortfalls while making full-disk encryption convenient, recoverable, and monitored for large-scale edge device deployments.
