Novell LINUX ENTERPRISE SERVER 10 - INSTALLATION AND ADMINISTRATION 11-05-2007 Installation Manual page 881

47.1.1 Creating an Encrypted Partition
during Installation
WARNING: Password Input
Observe the warnings about password security when setting the password for
encrypted partitions and memorize it well. Without the password, the encrypted
data cannot be accessed or restored.
The YaST expert dialog for partitioning offers the options needed for creating an en-
crypted partition. To create a new encrypted partition, click Create. In the dialog that
opens, enter the partitioning parameters for the new partition, such as the desired for-
matting and the mount point. Change the default Fstab Options, if necessary. For exam-
ple, if the encrypted file system should only be mounted when necessary, enable Do
Not Mount During Booting so it is not mounted as part of the boot process. Complete
the process by clicking Encrypt File System. In the following dialog, enter the password
twice. The new encrypted partition is created after the partitioning dialog is closed by
clicking OK.
Unless set not to mount during boot, the operating system requests the password while
booting before mounting the partition. The partition is available to all users once it has
been mounted.
To skip mounting the encrypted partition during start-up occasionally, click Enter when
prompted for the password. Then decline the offer to enter the password again. In this
case, the encrypted file system is not mounted and the operating system continues
booting, blocking access to your data.
To access an encrypted partition that is not mounted during boot, mount the partition
manually by entering mount
password when prompted to do so. After finishing your work with the partition, unmount
it with umount name_of_partition to protect it from access by other users.
When you are installing your system on a machine where several partitions already
exist, you can also decide to encrypt an existing partition during installation. In this
case follow the description in
Running System" (page 864) and be aware that this action destroys all data on the existing
partition to encrypt.
name_of_partition mount_point. Enter the
Section 47.1.2, "Creating an Encrypted Partition on a
Encrypting Partitions and Files 863