Ubuntu with Disk Encryption

From Notes_Wiki

Home > Microsoft Intune > Ubuntu with Disk Encryption

Ubuntu with Disk Encryption

Overview

Ubuntu supports full-disk encryption during installation, protecting data at rest with LUKS (Linux Unified Key Setup). This ensures only authorized users with the encryption passphrase can access system data.

Prerequisites

  • Ubuntu ISO (latest LTS recommended, e.g., 22.04).
  • Bootable USB installer.
  • Backup of important data.

Steps

1. Download Ubuntu ISO

2. Boot from Installation Media

  • Insert USB and reboot system.
  • Select Try or Install Ubuntu.

3. Start Installation

  • Click Install Ubuntu.
  • Select keyboard layout.

4. Configure Installation Options

  • Recommended:
    • Normal installation
    • Install third-party software

5. Select Installation Type

  • Choose: Erase disk and install Ubuntu.
  • Enable: Encrypt the new Ubuntu installation for security.

6. Set Encryption Options

  • Enter strong encryption passphrase.
  • Optional: enable secure erase.
  • Choose LVM for flexible partitioning.

7. Complete Installation

  • Select time zone.
  • Create a user account.
  • Wait for installation to complete and restart.

8. Boot with Encryption

  • On restart, system prompts for encryption passphrase.
  • After entry, Ubuntu boots normally.

Notes

  • Disk encryption is irreversible without reinstalling.
  • Backup data before installation.
  • Modern CPUs minimize encryption performance impact.
  • Recommended for laptops, mobile workers, and sensitive environments.


Home > Microsoft Intune > Ubuntu with Disk Encryption