[SOLVED] Trying to find out how to use a self-encrypting drive (OPAL 2.0) with proxmox on my Intel NUC

[gctwnl]

Still pretty new to proxmox (and Linux in general; I have some experience with unix-like operating systems, just not Linux)

I am trying to set up an Intel NUC10i5FNHN2 with proxmox to run a number of Ubuntu VMs. I would like the data on the internal disk to be encrypted. Encryption needs to be secure when the power is off (I only want to protect against hardware theft, nog against professional spy agencies).

I have come to understand that probably the most simple and best performing option is to use an OPAL 2.0 compatible NVMe SSD (still have to find out which) and use the hardware encryption of that SSD. I am now investigating that. One thing I have to find out (and haven't been able so far) is how to use full hardware disk encryption in combination with proxmox. Do I need to use something other than the standard proxmox VE ISO download (i.e. Debian and then add proxmox)? How does my NUC with proxmox Debian handle a boot process when I have set a password?

 

[gctwnl]

I was able to use the BIOS (its UI is a bit confusing as you have to select a sort-of greyed-out option)

See Can I turn hardware encryption for my OPAL-compatible boot SSD? (Done in Intel NUC BIOS)