DavidXanatos / DiskCryptor

A fork of the DiskCryptor full disk encryption tool
https://www.diskcryptor.org/
431 stars 100 forks source link

Windows 2 Go for System Partition Encryption #74

Open ghost opened 1 year ago

ghost commented 1 year ago

Is it recommended to encrypt system partition from Windows 2 Go bootable drive because it isn't possible to fully encrypt system partition that is already mounted or because of what is specified on DiskCryptor website: "That will allow you to gain access to data in case of any emergency (being unable to boot the system), and also allows for partition encryption and decryption operations to be performed" ?

I read somewhere that with VeraCrypt, system partition needs to be encrypted before installing the OS or else not everything gets encrypted due to "worn out" cells leaking data or something like that (https://www.reddit.com/r/VeraCrypt/comments/bm2t5p/encrypting_system_and_data_partition_on_ssd_disk/).

I can encrypt empty system drive by booting Windows 2 Go, but how do I install OS onto that system drive once its encrypted? Windows OS install media doesn't recognize partitions encrypted with DiskCryptor, even if DiskCryptor driver is integrated/pre-installed. To recognize partitions encrypted with DiskCryptor, DiskCryptor has to be fully installed and for years I am not able to integrate DiskCryptor fully into Boot.wim and/or Install.wim files to recognize encrypted partitions during OS install.