tpm
Seal the filestore encryption key in the machine's TPM, so it cannot be read off disk.
Properties
| Name | Description | Type | Default | Reloadable |
|---|---|---|---|---|
keys_file | File the TPM-sealed key is stored in. | string | - | No |
encryption_password | Password protecting the sealed key. | string | - | No |
srk_password | Password for the TPM storage root key. | string | - | No |
pcr | Platform Configuration Register the key is sealed against, so it only unseals on an unchanged boot state. | integer | - | No |
cipher | Cipher used for the filestore once the key is unsealed. | string | - | No |