Jetson Orin AGX Disk Encryption

[JerryChang]

you may see-also Topic 276872 for reference.

[elhamriothman]

I already saw the comment 20, that’s not my question I want to know how the passphrase is verified, is there another script besides those two that checks if the passphrase is correct who make the decision if the two passphrases matches or not?

[JerryChang]

it’s initrd to verify and unlock the encrypted root device.

[elhamriothman]

Oh ok I see is there a way to check the passphrase on the host and verify it also on the jetson after doing the disk encryption? I also can’t seem to find my ecid on the jetson orin agx to use it on the gen_luks_paaphrase.py with the -e passphrase?

[JerryChang]

hello elhamriothman,

please refer to below…
you may try adding some debug prints to obtain your ECID.
for instance,
$public_sources/r35.5.0/Linux_for_Tegra/source/public/atf_and_optee/optee/optee_os/core/pta/tegra/jetson_user_key_pta.c

static TEE_Result jetson_pta_gen_unique_key_by_ekb(...)
{
...
        ecid = tegra_fuse_get_ecid();