NAME

       zEscrow  - escrow a copy of ~/.ecryptfs and the mount passphrase to an escrow service compatible with the
       zEscrow open API for safe keeping

SYNOPSIS

       zescrow

DESCRIPTION

       This interactive utility enables eCryptfs Encrypted Home and Encrypted Private users to escrow a copy  of
       their  ~/.ecryptfs  configuration and randomly generated mount passphrase to an escrow service compatible
       with the zEscrow open API.

       zEscrow.gazzang.com  is  a  public  implementation  of  the  open  source  (AGPL)  project  and  API   at
       https://launchpad.net/zEscrow.  It is designed to help some eCryptfs users remotely store a copy of their
       eCryptfs configuration for safe keeping, in the event that they lose all or some of their configuration.

       First, this program will prompt the user for the target zEscrow server, defaulting to the public instance
       at https://zEscrow.gazzang.com.  Note that a target server should have a valid SSL certificate.

       Next,  it  will retrieve the gpg(1) fingerprint and gpg(1) public key of the zEscrow instance, and import
       it into a temporary keyring.

       It will then prompt the user for their LOGIN passphrase, in order  to  ecryptfs-unwrap-passphrase(1)  and
       store the MOUNT passphrase.

       Next,  it  will  create  a  compressed, encrypted, encoded archive using tar(1), gzip(1), and gpg(1), and
       submit it to the output to the chosen zEscrow instance using curl(1).  It will confirm the md5sum(1) with
       the remote server.

       Note that the uploaded archive will contain ~/.ecryptfs/*, which typically includes:
        - auto-umount
        - auto-mount
        - Private.sig
        - Private.mnt
        - unwrapped-passphrase

       Neither your LOGIN passphrase, nor your wrapped-passphrase are ever sent to the server.

       The  local  utility  will confirm that the server's returned md5sum matches the locally calculated value.
       If everything matches, the program will display a unique URL, to which the user  should  navigate,  where
       they  will  login  using  a Google OpenID account, and associate an email address with the uploaded data.
       The program will offer to launch a sensible-browser(1) to the returned URL.

       Any failure whatsoever will result in a non-zero exit  code,  and  the  user  should  beware  that  their
       eCryptfs configuration was NOT uploaded.

SEE ALSO

       ecryptfs-recover-private(1),  ecryptfs-unwrap-passphrase(1), tar(1), gzip(1), gpg(1), curl(1), md5sum(1),
       sensible-browser(1), https://zEscrow.gazzang.com, https://launchpad.net/zEscrow

       http://launchpad.net/ecryptfs/

AUTHOR

       This manpage was written by Dustin Kirkland <kirkland@ubuntu.com> for Ubuntu systems (but may be used  by
       others).   Permission  is  granted to copy, distribute and/or modify this document under the terms of the
       GNU General Public License, Version 2 or any later version published by the Free Software Foundation.

       On Debian systems, the complete text of the GNU General Public License can be found in /usr/share/common-
       licenses/GPL.