Receive and display escrow keys

fleetdm / fleet

Open-source platform for IT, security, and infrastructure teams. (Linux, macOS, Chrome, Windows, cloud, data center)

https://fleetdm.com

Other

3.16k stars 432 forks source link

Receive and display escrow keys #23584

Open mostlikelee opened 2 weeks ago

mostlikelee commented 2 weeks ago

Create/Update API to receive Linux LUKS key
- use orbit auth
- encrypt key and persist in host_disk_encryption_keys
Update getHostEncryptionKey endpoint to return decrypted Linux keys

mostlikelee commented 1 week ago

In addition to receiving the passphrase/key and client_error, i think it would be useful to add the slotKey which can be used in the future for passphrase rotation.