== Network-based unlocking ==

=== NBDE (network-bound disk encryption) with clevis & tang ===

Framework introduced w/ RHEL 7.x; is available in both Debian and Ubuntu now.

 * [[https://rhelblog.redhat.com/2018/04/13/an-easier-way-to-manage-disk-decryption-at-boot-with-red-hat-enterprise-linux-7-5-using-nbde/|An easier way to manage disk decryption at boot with Red Hat Enterprise Linux 7.5 using NBDE]]
 * [[https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/security_guide/sec-using_network-bound_disk_encryption|Using Network-Bound Disk Encryption]]
 * [[https://ubuntuforums.org/showthread.php?t=2395010|NBDE (clevis and tang) support in 18.04]]