> > What I did notice is, that there might be interference with cryptsetup. As 
> > long as I have AEM on, the system does ask for the TPM password, does not 
> > show the secret and does NOT ask for the disk password before starting up 
> > anyway.
> 
> Is your TPM password the same as your disk encryption password? That
> would defeat the purpose of AEM, and indeed interact weirdly with
> cryptsetup: https://github.com/QubesOS/qubes-issues/issues/978
> 
> Rusty

Dear Rusty,

Yes - that was the problem. For such basic but important steps, I usually 
install things once, tear them down and install again to gain confidence. In 
this case, I did use real passwords for the first attempt but trivial and equal 
ones for the next attempts. Everything did work after going back to strong and 
different passwords.

Certainly, one would never use the same password for both purposes in 
production. Nevertheless, this pattern is not good: The password seems to be 
stored and tried in other fields as well. That should not happen in security 
software, I would suspect.

Thank you very much!

Regards,

Michael

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/64408e25-8fa2-4d20-82bd-7063ff994bf5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to