Yubikey LUKS FIDO2

Hi folks!

I’m trying to get my yubikey to unlock the luks encrypted nvme at boot time, as opposed to using a password.

But I cannot find systemd-cryptenroll anywhere on the system. Pardon my lack of knowledge in Linux: does anyone know why systemd v257 running debian trixie/sid on the pocket reform does not have systemd-cryptenroll, and how to get it? I know there are other ways, like using cryptsetup, but I think cryptsetup does not support FIDO2 like systemd-cryptenroll does.

Thanks!!

1 Like

According to this thread it is now in the systemd-cryptsetup package.

2 Likes