Enabling FDE

Full-disk encryption (FDE) is a security technology that protects sensitive information by encrypting entire disk partitions. In non-confidential computing environments, FDE is typically implemented using the Linux Unified Key Setup (LUKS) and user-supplied keys. However, in a TrustZone-based confidential computing architecture such as virtCCA, encryption keys are obtained using an attestation service instead of being provided by users. For details about how to integrate FDE with virtCCA, see Full Disk Encryption.