Multiple password input on boot about sedutil HOT 4 CLOSED

@sdca

The PBA is for a booting device. If you have multiple SEDs, obvisouly you're only booting on one, and can unlock the rest later on, via sedutil-cli. No need to unlock them all before actually booting the OS.

from sedutil.

@snow3461

sedutil-cli requires raw ATA access and/or root, and possibly represents a less secure way to enter the decryption password.

from sedutil.

@sdca

You have a few options here. Set the same password for all the drives you need to successfully boot and then you can manually unlock the rest as @snow3461 suggests. You could also load the rescue image to the shadow table, use sedutil-cli to manually unlock the drives and reboot.

Adding features to the PBA for edge cases will slow down boot for everyone.

from sedutil.

@sdca

The PBA/rescue requires that same access.

from sedutil.