usbarmory-setup

I order my USB Armory I device from crowdsupply to Europe, and after more than one month and paying customs duties, the Armory finally arrived :-)

My purpose is to use the Armory as a password manager with KeePassXC, and also INTERLOCK (file encryption front end).

1. Preparing your own microSD card

• 1. check microSD-compatibility
• 2. burn Arch Linux image into microSD card

I choose a Samsung microSD for Arch Linux, but there are other available images for USB Armory I.

2. Connect to USB armory

Option 1 - serial

We can use USB to TTL cable to connect to USB armory serial port; the breakout header is described in gpio page.

I solder a header in USB armory and use pins 1,5,6 to connect a USB to TTL adapter with silicon CP210x chipset and specific drivers. To connect in macOS use the next command:

screen /dev/tty.SLAB_USBtoUART 115200

Option 2 - ssh connection

The Arch Linux image comes with predefined ipv4 address 10.0.0.1, so set your IP address to 10.0.0.2 and connect to your USB armory.

Now you can log in with

ssh 10.0.0.1 -l usbarmory

3. Prepare KeePass

Setup is done with Ansible

• setup ssh
• install keepassxc, etckeeper and standard utilities

4. INTERLOCK

Setup interlock on USB armory (armv7) for Arch Linux as described in my blog entry USB Armory I - Interlock setup.

Notes

We need the RNDIS/Ethernet Gadget interface in the macOS Network Preferences.

To share macOS internet access with the USB armory device, you can:

option 1

sudo ./scripts/connection_share.sh

option 2

• set USB armory IP to 192.168.2.X/24 and gateway 192.168.2.1
• in macOS set the IP address of RNDIS/Ethernet Gadget interface to 192.168.2.1
• finally, set Enable Internet Sharing to ON in System Preferences

To share Linux internet connection with the USB armory device, just run:

sudo ./scripts/linux_connection_share.sh