Disk Encryption Articles

Tutorials Jun 19, 2026Advanced

Tang and Clevis on Linux: Network-Bound Disk Encryption (NBDE) for Headless Servers in 2026

Auto-unlock LUKS2 volumes at boot using Tang and Clevis NBDE. Covers install, sss threshold pins with TPM2, safe key rotation, and boot troubleshooting for headless Linux servers.

Editorial Team 14 min read

Tutorials Mar 14, 2026

Linux Full Disk Encryption with LUKS2, TPM2, FIDO2, and Secure Boot

Set up hardened Linux full disk encryption with LUKS2, TPM2 auto-unlock, FIDO2 hardware keys, and Clevis/Tang NBDE. Includes tested commands for Fedora, Ubuntu, and RHEL with PCR selection guidance and troubleshooting.

Priya Ramaswamy 19 min read