diff --git a/README.md b/README.md index 9546309..3359e0d 100644 --- a/README.md +++ b/README.md @@ -70,6 +70,23 @@ cryptsetup luksHeaderBackup /dev/disk/by-uuid/ --header-backup-file l fido2luks -i add-key --exclusive /dev/disk/by-uuid/ ``` +## Addtional settings + +### Password less + +Remove your previous secret as described in the next section, incase you already added one. + +Open `/etc/fido2luks.conf` and replace `FIDO2LUKS_SALT=Ask` with `FIDO2LUKS_SALT=string:` + +Import the new config into env: + +``` +set -a +. /etc/fido2luks.conf +``` + +Then add the new secret to each device and update dracut afterwards `dracut -f` + ## Removal Remove `rd.luks.2fa` from `GRUB_CMDLINE_LINUX` in /etc/default/grub