From d16118e695cb49d73cbe5f84712d423c26000573 Mon Sep 17 00:00:00 2001
From: shimun <shimun@shimun.net>
Date: Tue, 8 Oct 2019 15:11:49 +0200
Subject: [PATCH] Readme

---
 README.md | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/README.md b/README.md
index 9546309..3359e0d 100644
--- a/README.md
+++ b/README.md
@@ -70,6 +70,23 @@ cryptsetup luksHeaderBackup /dev/disk/by-uuid/<DISK_UUID> --header-backup-file l
 fido2luks -i add-key --exclusive /dev/disk/by-uuid/<DISK_UUID>
 ```
 
+## Addtional settings
+
+### Password less
+
+Remove your previous secret as described in the next section, incase you already added one.
+
+Open `/etc/fido2luks.conf` and replace `FIDO2LUKS_SALT=Ask` with `FIDO2LUKS_SALT=string:<YOUR_RANDOM_STRING>`
+
+Import the new config into env:
+
+```
+set -a
+. /etc/fido2luks.conf
+```
+
+Then add the new secret to each device and update dracut afterwards `dracut -f`
+
 ## Removal
 
 Remove `rd.luks.2fa` from `GRUB_CMDLINE_LINUX` in /etc/default/grub