# Encryption with Air Gap

**URL:** <https://community.zymbit.com/t/encryption-with-air-gap/1560>\
**Category:** GENERAL\
**Created:** [August 21, 2023, 11:27pm UTC](https://community.zymbit.com/t/encryption-with-air-gap/1560 "2023-08-21T23:27:53Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Bob\_of\_Zymbit](https://avatars.discourse-cdn.com/v4/letter/b/82dd89/32.png) [@Bob\_of\_Zymbit](https://community.zymbit.com/u/Bob_of_Zymbit)\
**Post date:** [August 21, 2023, 11:27pm UTC](https://community.zymbit.com/t/encryption-with-air-gap/1560/1 "2023-08-21T23:27:53Z")

</div>

This is a post containing the steps for encrypting your root file system offline using the Zymkey, HSM4, HSM6, or SCM on the bullseye 32 bit desktop image.

1. Append “arm\_64bit=0” to /boot/config.txt (necessary for 32bit OS to find Zymbit packages), enable i2c interface through raspi-config, and reboot
2. Copy the attached scripts onto the pi
3. [**pi should be online for this part**] Download the necessary packages on the pi: cat download\_zk\_packages.sh script | sudo bash
4. Run the install script and reboot: cat install\_zk\_sw\_offline.sh | sudo bash
5. Connect a flash drive and confirm it mounts
6. Run the encryption script: cat mk\_encr\_sd\_rfs\_offline.sh | sudo bash
7. Wait for 2 automatic reboots. If all goes well, the Blue LED wil flash once every three seconds.

[zk-scripts.zip](https://community.zymbit.com/uploads/short-url/9hpJDVjVBII7zaUhJ9TWDVC4YWf.zip) (17.0 KB)