Change encryption password with ZFSBootMenu

borgman.jeremy@pm.me (Jeremy Borgman) — Mon, 06 Jan 2025 00:00:00 +0000

Introduction

I’ve been enjoing ZfsBootMenu for some time now. One issue I encounted was trying to rotate my encryption key. When I first set up ZBM I followed the upstream encryption instructions However I did not find a clear guide on how to change the password later.

Process

Change Passphrase

Since the passphrase is stored in /etc/zfs/zroot.key, the first step is to edit that file and replace the old passphrase with the new passphrase. Note the permission of this file is supposed to be 000, so you may need to change it to be editable, then change it back to 000.

Encryption on Stuff I Learned Today

Change encryption password with ZFSBootMenu

Introduction

Process

Change Passphrase