Fedora LUKS2 + TPM2 + Secure Boot
Set up, manage, and recover Fedora full-disk encryption with LUKS2 + TPM2 + PIN bound to PCRs 7 and 14, with a passphrase fallback in slot 0.
Set up, manage, and recover Fedora full-disk encryption with LUKS2 + TPM2 + PIN bound to PCRs 7 and 14, with a passphrase fallback in slot 0.
Generate and use SSH keys whose private material never leaves a Nitrokey 3 or YubiKey 5, using FIDO2 resident credentials.