Using the Linux Root Encryption Debugger

If you want to open a debug session to check the process of the root drive encryption and you specified yes when prompted about the debug console on the htroot encrypt command, you can start an ssh session on the server using the id_rsa key file obtained while running htroot encrypt.

Tip: If you need another copy of the id_rsa key file, you can download it from the KeyControl webGUI by selecting the VM on the Cloud > VMs tab and then selecting Actions > Download Bootloader SSH Key.

For example, here is the menu displayed in ssh:

# ssh -i id_rsa root@192.168.140.133
Warning: Permanently added '192.168.140.133' (RSA) to the list of known hosts.
BusyBox v1.20.2 (Ubuntu 1:1.20.0-8.1ubuntu1) built-in shell (ash)
Enter 'help' for a list of built-in commands.

HyTrust Debug Console

1. Show HT encryption log file
2. Authenticate
3. Show Network info
4. Restart Network
5. Advanced access
6. logout

Action:  

The first option shows the encryption status. For example, here are a few of the lines towards the end of the output:

------------ KeyControl and status -----------------
192.168.140.151:443
Connected
---------------------------------------------------

------------ Encryption / Decryption status --------
Root device encryption
Processing:  21%
Time left: 00:13:53
---------------------------------------------------

We can see that we are connected to KeyControl and that encryption is in progress. At this point, the operation is 21% complete and there are just under 14 minutes left.

You should not need to invoke any of the other operations unless requested by HyTrust support.