<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p><br>
</p>
<div class="moz-cite-prefix">On 2024-09-18 22:18, Discussions wrote:<br>
</div>
<blockquote type="cite"
cite="mid:DXcsbG-qfIuYwfWIPL-VOzFzaYvw3LYJoKR30jMjKO7uV7LGy9ETK_IwtQjsa7d7gBEpkVezVrK2GhTCNPTXQCBjwFWU3kJlIiSh6-n9KWk=@upxcel.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div style="font-family: Arial, sans-serif; font-size: 14px;">
<div>Good day,</div>
</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;">I
need your help with the following if it can be accomplished
using scripts that can be applied using Remote Management
platforms (RMM) / (MDM):</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;">
<ol
data-editing-info="{"orderedStyleType":3,"unorderedStyleType":1}"
data-listchain="__List_Chain_195">
<li style="list-style-type: "1) ";"><span>Is there a
way to </span>encrypt linux (Ubuntu) devices using a
script after the Operating System has been installed and
user has been assigned?</li>
</ol>
</div>
</blockquote>
<p>Encrypt/move user folder onto encfs encryption. Encrypt existing
stuff and remove original plain text.<br>
</p>
<blockquote type="cite"
cite="mid:DXcsbG-qfIuYwfWIPL-VOzFzaYvw3LYJoKR30jMjKO7uV7LGy9ETK_IwtQjsa7d7gBEpkVezVrK2GhTCNPTXQCBjwFWU3kJlIiSh6-n9KWk=@upxcel.com">
<div style="font-family: Arial, sans-serif; font-size: 14px;">
<ol
data-editing-info="{"orderedStyleType":3,"unorderedStyleType":1}"
data-listchain="__List_Chain_195">
<li style="list-style-type: "2) ";">Is there a way
to encrypt Linux devices at the hardware level using a
Remote Management agent e.g NinjaOne RMM agent</li>
</ol>
</div>
</blockquote>
<p>If there is already "hardware with encryption level" that has
been started with being off, does it allow turning it on, already
with data inflight. I remember hearing about drives that were
doing fake encryption, those can fake anything. But for real, is
there such drives?</p>
<p>If drives exists, you have root to ask it do stuff.<br>
</p>
<blockquote type="cite"
cite="mid:DXcsbG-qfIuYwfWIPL-VOzFzaYvw3LYJoKR30jMjKO7uV7LGy9ETK_IwtQjsa7d7gBEpkVezVrK2GhTCNPTXQCBjwFWU3kJlIiSh6-n9KWk=@upxcel.com">
<div style="font-family: Arial, sans-serif; font-size: 14px;">
<ol
data-editing-info="{"orderedStyleType":3,"unorderedStyleType":1}"
data-listchain="__List_Chain_195">
<li style="list-style-type: "3) ";">Is it possible
to use RMM platform to<b> remotely lock</b> or <b>remotely
wipe</b> the device if it is lost or stolen</li>
</ol>
</div>
</blockquote>
<p>You set some automatic agent, with root privileges. You can do
anything upon detection. Three attempts at login, and no payment
in cryptocoins 🙂 => rm -rf /home<br>
</p>
<blockquote type="cite"
cite="mid:DXcsbG-qfIuYwfWIPL-VOzFzaYvw3LYJoKR30jMjKO7uV7LGy9ETK_IwtQjsa7d7gBEpkVezVrK2GhTCNPTXQCBjwFWU3kJlIiSh6-n9KWk=@upxcel.com">
<div style="font-family: Arial, sans-serif; font-size: 14px;">
<div><br>
</div>
<div>If any or all of this is possible. Can someone help or
guide me on the right path to achieve these goals?</div>
<div>Also if you are aware of better RMM platforms either paid
or Open source, that can aid in archiving these goals that
would be greatly appreciated.</div>
</div>
</blockquote>
SaltStack? On wake, if no network, and someone tries n-times bad
login => wipe. With network you have root there.<br>
<blockquote type="cite"
cite="mid:DXcsbG-qfIuYwfWIPL-VOzFzaYvw3LYJoKR30jMjKO7uV7LGy9ETK_IwtQjsa7d7gBEpkVezVrK2GhTCNPTXQCBjwFWU3kJlIiSh6-n9KWk=@upxcel.com">
<div style="font-family: Arial, sans-serif; font-size: 14px;">
<div><br>
</div>
<div>Attempting to simulate something close to Jamf Pro for
Apple devices.</div>
<div><br>
</div>
<div>Regards,</div>
<div>Ushe</div>
</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;"><br>
</div>
<div
class="protonmail_signature_block protonmail_signature_block-empty"
style="font-family: Arial, sans-serif; font-size: 14px;">
<div
class="protonmail_signature_block-proton protonmail_signature_block-empty">
</div>
</div>
</blockquote>
</body>
</html>