Versions Compared

Old Version 2

changes.mady.by.user David William Botsch

Saved on

compared with

New Version Current

changes.mady.by.user David William Botsch

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. LUKS encryption, when set up, will wipe all existing data on the hard drive. 
  2. Add a second decryption password and give that password to CNF Computing for central escrow.
  3. The LUKS header should also be backed up and centrally escrowed - see section 6 Backup and Data Recovery of https://gitlab.com/cryptsetup/cryptsetup/wikis/FrequentlyAskedQuestions for instructions on backing up the LUKS Header.

 

Exceptions

Cornell owned computers where the disk is not encrypted must be documented as exceptions. The CNF maintained exceptions list is stored in Cornell BOX.