4.4. Create a startup key from a working system

If you have a secured system running, it is easy to recreate an USB key with the following procedure:

Plug the new USB key and mount it in /media/usb:

Note

The key should be prepared with gparted as described in first chapter and have a the partition formatted as ext2.

mount /dev/sdc2 /media/usb

Copy the content of the original key to the startup key:

cp -a /boot/* /media/usb

Label the key to be a boot key:

e2label /dev/sdc2 BOOT

Install grub2 into the new disk:

grub-install --force --no-floppy --boot-directory=/media/usb --root-directory=/ /dev/sdc

Each time the kernel is update, the second key will also have to be updated using this procedure