DISK46

A preconfigured, LUKS-based Linux distribution image designed to meet the Cyber Resilience Act’s requirements for data confidentiality and integrity.

DISK46 enables out-of-the-box encryption for Linux-based IoT systems, securing data at rest and simplifying compliance with the EU Cyber Resilience Act

Built on a minimal Linux foundation, DISK46 ensures efficiency, transparency, and verifiable integrity while reducing the complexity of integrating secure boot and automated key retrieval into IoT deployments.

Whether you’re developing industrial gateways, remote sensors, or edge devices, DISK46 lets you secure disks automatically, even after power loss, without human input.

Key Features

🧱 Pre-Installed LUKS Encryption

DISK46 ships with Linux Unified Key Setup (LUKS) preconfigured, ensuring that all stored data is encrypted and protected against unauthorized access from the first boot.

🔑 Automated Secure Boot with Clevis

Using Clevis, Clevis-LUKS, and Clevis-initramfs, the system securely retrieves and unlocks encryption keys at boot: no need to manually enter passwords. This makes DISK46 ideal for unattended or remote IoT deployments.

🌐 Secure Key Retrieval via i46 Server

DISK46 integrates with an i46-provided network bootstrap mechanism, which allows secure key retrieval and authentication before unlocking the device.

🧾 Software Bill of Materials (SBOM)

With Syft built in, DISK46 generates a complete SBOM on demand, listing all installed components and dependencies, promoting transparency, auditability, and compliance with the CRA.

⚙️ Lightweight and Flexible

Available for Ubuntu Server, Ubuntu Desktop, and Raspbian (64-bit) distributions, DISK46 runs efficiently on Raspberry Pi and similar hardware.

Why it Matters

The CRA mandates that all products with digital elements protect the confidentiality and integrity of stored and transmitted data.

For IoT devices, this means implementing disk encryption and ensuring that the encryption mechanism is automated and tamper-resistant.

DISK46 directly addresses these requirements by combining:

Encryption at rest (LUKS)
Verified integrity during boot (Clevis-based decryption)
Transparent documentation through SBOM generation

With DISK46, manufacturers can demonstrate technical compliance with Annex I (e) and (f) of the CRA, which require encryption of stored data and protection against unauthorized modification

Try DISK46 for Free!

You can download a free demo .img file to test DISK46 on your own Raspberry Pi or compatible device.

Fill in your name, organization, and email address.

You’ll immediately receive a download link to the DISK46 demo image (.img file) and installation instructions by email.

The demo is for evaluation purposes only and includes all core security features. It should never be used in operational or commercial deployments.