I have the need for a company laptop (Dell e6540) that contains our java application on it to go out for evaluation purposes. For this reason I would like to make sure that the HDD is protected from customers (or anyone else) being able to take our java app off of the laptop and view the source. We have taken many necessary precautions and hardened the OS putting it into a custom "kiosk-like" mode.
My last obstacle is to get the key for disk encryption stored on the TPM of the Dell Laptop. This way I can have an encrypted disk without giving a customer the password/key. This has proven to be a nightmare so far under Ubuntu 12. All of the documents I find are at least 4-5 years old. The interaction of using LUKS with TPM-LUKS and Trousers is unstable on the newer linux versions (at best)
The requirements are Disk Encryption (either partition or FDE) without having to give the password to the users. Is anyone aware of a solution on Linux? This is seamless on Windows using BitLocker. I have offered up SecureDoc as a solution but they do not see their product as a good fit.