Physically removing internal disk(s) and wireless interface(s) if not soldered to motherboard or disabling interface(s) using BIOS if soldered is recommended to strengthen data persistence and air gap hardening.
Running Superbacked OS on flash drive with signed firmware and write protection enabled such as Kanguru FlashTrust™ Secure Firmware USB 3.0 Flash Drive (WP-KFT3-16G) is recommended.
Go to https://www.raspberrypi.com/software/, download and install Raspberry Pi Imager.
Heads-up: depends on Qt.
Heads-up: for additional security, verify Superbacked OS release.
Open “Raspberry Pi Imager”, click “CHOOSE OS”, then “Use custom”, select superbacked-os-amd64-1.6.1.img.xz
, click “CHOOSE STORAGE”, select USB flash drive, click “NEXT”, then “NO” and, finally, click “YES”.
Raspberry Pi Imager, release semver may differ
If using Kanguru FlashTrust™ Secure Firmware USB 3.0 Flash Drive or equivalent, enable write protection.
I/O Port Access, BIOS menu may differ
Secure Boot, BIOS menu may differ
Boot Order Lock, BIOS menu may differ
Boot Order Lock, BIOS menu may differ
Heads-up: password is “superbacked”.
Boot Superbacked OS using “Advanced options for Ubuntu” and “Ubuntu, with Linux 6.8.0-49-generic” (required when using write-protected hardware).
If scanning blocks does not work, please try using a higher quality 1080p webcam such as the Razer Kiyo X.