Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

DMCrypt Passphrase Management

Is there any way we may have the DMcrypt passphrase managed centrally
using a Challenge response for >5000 clients?
I am looking at a solution which is closer to Pointsec/checkpoint.
We have been able to save the encyption header for each laptop running Ubuntu in our Organization, however there is a serious concern in case someone is not online and still needs a remote assistance from the service desk.

We used Puppet for user as well as configuration changes.
But my challenge is to integrate it with a challenge response mechanism and achieve:

  1. Should be able to reset the password as forced by the password expiry policy.
  2. Service Desk should be able to help user who forgets the passphrase even when he/she is not on the network.
  3. Should be able to store a master passphrase in one of the slots to have it stored in a secure database for Data Forensics purposes.
share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.