Let's move on and see how to unlock locks, encrypted drives with a key file decrypt and the locks enabled
devices may hold up to 10 different key files or passwords.
In the last lecture, we have encrypted the USB disk using a passphrase, so next to having the already
setup password, we are going to add a secret key file is an additional authorization method.
Let's generate the key file that there are more approaches, but I'll choose the easiest one.
I'm going to use the document and therefore you send them to generate a random key.
So did I.
If they have your random output file equals, let's say you file the name of the file, buycks one hundred
twenty four and count for.
This will create a file with random content with the size of four thousand ninety six Bicks.
Which is like a 30, 40 character password.
By the way, you can use any file is key file, but I think one with random content is a very good,
insecure one.
Perfect.
This is the random key Cepheid.
It's not the Muskie file.
Optionally for extra security, you can encrypt the key file symmetrically using GBG, and they will
make the file readable only by about.
If a hacker gets access to the key file that the user, the hacker is already logged in is what and
you have a bigger problem anyway.
Change mode four hundred and the fight.
These are the right permissions for the file.
We have a USB disk that's already set up for decrypt and locks, and it was encrypted using a password.
I'm going to get the key file is an additional authorization method creep setup.
Locks it key
the name of the drive, slash dev, slash HDB.
Don't forget to use the correct name.
I want to check it again.
I must be good.
OK, the name is is Debbie.
And the path to the key file would key file.
And I'm prompting to enter an existing password to unlock the drive.
This is the password from the previous lecture when we've set up the drive.
And it's done.
The key was added is an additional authorization method.
Now the driver is locked, so let's try to unlock it using the secret key, the secret file set setup
locks open the name of the disk.
There has to be the name of the member file, let's say secret and then minus minus key.
Minus file.
And the correct path to the Kilfoyle route Cepheid.
And it was unlocked, I can mount the encrypted partition anywhere on the main file system and use it
normally.