0
I would like to encrypt my whole computer with Veracrypt, but when I try to, the buttons are hidden :
I want a normal system encryption, but the whole drive too, which is impossible here. I tried to uninstall VeraCrypt, install it again, reboot my computer but it hasn't worked.
Also, if this finally work, I was planning to take Twofish Serpent encryption algorithm and SHA-512 hash algorithm.
Do you think it's a good choice ?
Thanks
Lulucmy
Posted 2018-03-01T09:13:58.513
Reputation: 149
0
You cannot encrypt the whole volume because you have secureboot enabled or you use some other type of encryption that interferes with the boot loading.
Disable secure boot, set your UEFI in BIOS-compatible mode, install the OS and then you can use whole drive encryption.
If you do need to boot from a partition larger than 2TB then you do need to leave GPT/UEFI boot on, but if not, there is no reason not to use MBR.
Overmind
Posted 2018-03-01T09:13:58.513
Reputation: 8 562
VeraCrypt supports GPT what’s the point of enabling compatibility mode? – Ramhound – 2018-03-01T11:16:24.093
Why use GPT for a boot drive ? GPT is for 2TB+ drives. I don't know many booting from 2TB+ partitions. BIOS-compatible mode does not prevent you from using GPT disks inside the OS. – Overmind – 2018-03-01T11:29:04.413
All my devices have 4TB+ storage devices. If you enable CPM, it means you end up using MBR, instead of GPT. – Ramhound – 2018-03-01T11:39:22.133
Not exactly. Do not confuse booting with drive mode support. Using a MBR boot device does not prevent you from using GPT drives inside the OS. My current setups are 64GB SSD MBR boot encrypted OS with RAID single partition 5.54 TB GPT and the notebook is 256 SSD MBR Encrypted boot device with 3.63TB GPT drive (which has the encrypted file container). Now if you want to boot from 2TB+ devices then you do indeed need GPT enabled via UEFI to do that. Not needing to to that I see no need not to use MBR for the OS boot drive. I added the last part to the answer. Thanks for the feedback. – Overmind – 2018-03-01T12:12:45.633
There are disadvantages to using MBR in 2018. I am not confusing anything. – Ramhound – 2018-03-01T12:18:12.383
I think Bitlocker is a much better choice if your Windows supports it. – mtak – 2018-03-01T09:29:44.570
1I would love having Bitlock, but unfortunally it is only available on Windows 10 Pro... – Lulucmy – 2018-03-01T09:36:10.083
1I disagree that bitlocker is any better. – Overmind – 2018-03-01T09:51:19.487
@Overmind Maybe it has a handy feature, just in case you "forget" your passphrase maybe someone at MS can decrypt your files for you? ;-) – Xen2050 – 2018-03-10T03:07:30.233