PREVIEW · PREBOOT / STAGE 2
FORTROS · PREBOOT v1.04
STAGE 2 / SILENT AUTH
Organisation
Northwind Compute · NOC-A1
FortrOS
Preboot / silent authentication

Happy-path boot. When the overlay is reachable and the local generation matches what the org wants, preboot authenticates, unlocks /persist, verifies image.sig, and kexecs into the main OS in a few seconds. No display input needed.

PROC / PREBOOT.01
CHECKPOINTS · 9 / 9
  1. LINK UP e1000e · 1000BASE-T
  2. DHCP ACQUIRED 10.10.0.98/24 · gw 10.10.0.1
  3. GATEWAY REACHABLE noc-a1.northwind.internal:443
  4. CONN_AUTH HANDSHAKE ed25519 from TPM NV · authenticated
  5. GENERATION MATCH gen-e7ef0182c489 · cache hit
  6. LUKS KEY DERIVED HKDF(preboot_secret, ca_pubkey, gen_id)
  7. /PERSIST UNLOCKED dm-crypt active · keyslot 0
  8. IMAGE.SIG VERIFIED ed25519 org CA · ok
  9. KEXEC INTO GENERATION handing off to main-OS kernel…
NODEf60c 9cc3 c2ab 4719 GENgen-e7ef 0182c489 BOOT TIME00:00:04.82
When silent auth can't proceed

If ethernet is down, gen-auth is unreachable, or the operator presses a key during the first 3 seconds, preboot drops to a recovery prompt with three explicit paths out: connect to a network, resume from hibernate, or emergency-boot the last cached generation.

View recovery prompt