I'm surprised that this question is not asked more frequently, but (in RHEL) does LUKS support TPM's the way that Windows BitLocker does? If so, how is this feature implemented, and does it provide the same type of protections that BitLocker for Windows provides?
BitLocker is very popular among businesses, and now that RHEL6 is getting FIPS certification for the disk encryption modules, it would be great if it also supported the same feature set.
However, I do understand that with the way LUKS works, not every volume can be encrypted, since the system would need to read the
/etc/fstab and the
/etc/crypttab files in order to mount the volumes. I believe this is OK as long as
/var, and other directories chosen by the administrator are encrypted.
I find it odd that "TPM" is not a tag on serverfault.