1
<?xml version="1.0" encoding="UTF-8"?>
2
<!DOCTYPE para PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3
"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd">
5
This is part of the Mandos system for allowing computers to have
6
encrypted root file systems and at the same time be capable of
7
remote and/or unattended reboots. The computers run a small client
8
program in the initial <acronym>RAM</acronym> disk environment which
9
will communicate with a server over a network. All network
10
communication is encrypted using <acronym>TLS</acronym>. The
11
clients are identified by the server using a TLS key; each client
12
has one unique to it. The server sends the clients an encrypted
13
password. The encrypted password is decrypted by the clients using
14
a separate OpenPGP key, and the password is then used to unlock the
15
root file system, whereupon the computers can continue booting