In this tutorial, we will show the simplicity of the process of enabling Full Disk Encryption (FDE) and Secure Boot on Ubuntu Core on platforms with Trusted Platform Module (TPM) support. A quick introduction for understanding the concepts and a simple walk through the process of preparing and flashing an Intel NUC image, will be followed.
FDE and Secure Boot are key security features which have been incorporated into Ubuntu Core 20 release, complementing the out-of-the-box security characteristics already available in previous versions.
Bear in mind, Ubuntu Core is production-friendly, not necessarily developer-friendly. We recommend you use Ubuntu Core for “fire and forget” purposes where you won’t want to iterate on the software.
With Ubuntu Core, you are able to execute remote updates and patches for your appliances and devices, but for development and prototyping, we recommend Ubuntu Server. Let’s start!
What you’ll learn
- Full Disk Encryption and Secure Boot fundamentals
- FDE and Secure Boot enablement
What you’ll need
- An Ubuntu SSO account with an SSH key
- An Intel NUC with BIOS updated to the latest version (update instructions)
- 2 USB 2.0 or 3.0 flash drives (2GB minimum)
- A monitor with an HDMI interface
- A Mini HDMI to HDMI cable
- A USB keyboard and a mouse
- A monitor with VGA or HDMI interface
- A VGA or HDMI cable
- A network connection with Internet access
- An Ubuntu Desktop 20.04.1 LTS image
- An Ubuntu Core image