Description
LUKS volumes can be unlocked with a SoloKey-backed FIDO2 hmac-secret workflow during boot or on a running system. Administrators use `skfde-cred`, `skfde-enroll`, `skfde-open`, and the mkinitcpio hook to add hardware-key based disk unlock. Misconfiguration can lock users out or affect encrypted disks, so fallback passphrases and backups are required.