Truecrypt: Encrypt entire drive without having a CD/DVD drive

16

5

When I try to encrypt my laptop using TrueCrypt, it wants me to create a rescue disk and verify it. However, the laptop does not have a CD drive or a DVD drive, and I don't own something that can be connected to it. So, how do I proceed?

I guess that a meaningful "rescue disk" would be a bootable USB flash memory, so maybe the solution is to burn the iso onto such one - but how?

Lars D

Posted 2010-01-09T13:01:17.240

Reputation: 291

Answers

8

If it's Windows, grab Microsoft's Virtual CD-ROM Control Panel. Run it as Administrator, install the driver, add a new virtual drive, and load TrueCrypt's rescue disc image on it. The .iso should be somewhere in %ProgramFiles%\TrueCrypt\

Edit: Virtual CloneDrive appears to support Windows 7 on x64.

This should be enough to trick TrueCrypt's disc check. Once it's done, don't forget to uninstall the Virtual CD driver.


To boot the rescue disc from a USB drive, you could try these:

user1686

Posted 2010-01-09T13:01:17.240

Reputation: 283 655

2I can also vouch for Virtual Clonedrive on x64. Works, and works nicely. – Dan Esparza – 2010-07-09T17:43:22.757

I am using Windows 7 64-bit on that machine, so the virtual CD-ROM Control Panel app from Microsoft does not work. – Lars D – 2010-01-09T13:34:49.230

2

In that case, http://www.slysoft.com/en/virtual-clonedrive.html appears to support x64.

– user1686 – 2010-01-09T13:42:12.667

23

Normally the Truecrypt Format application needs to verify that you've burned the created rescue disk to a CD/DVD drive, and it won't proceed until it does that.

In order to proceed without burning the rescue disk, you need to start the "Truecrypt Format" with the "/noisocheck" or "/n" flag. After the image is created, you can then save it to any folder on your drive, and later on burn it on a USB-drive, as mention in other posts.

More information: http://www.truecrypt.org/docs/?s=command-line-usage

/noisocheck or /n

Do not verify that TrueCrypt Rescue Disks are correctly burned. This can be useful e.g. in corporate environments where it may be more convenient to maintain a central repository of ISO images rather than a repository of CDs or DVDs. WARNING: Never attempt to use this option to facilitate the reuse of a previously created TrueCrypt Rescue Disk. Note that every time you encrypt a system partition/drive, you must create a new TrueCrypt Rescue Disk even if you use the same password. A previously created TrueCrypt Rescue Disk cannot be reused because it was created for a different master key.

TFM

Posted 2010-01-09T13:01:17.240

Reputation: 4 243

3This should be the accepted answer as it doesn't need any third party program. As stated above, just run "C:\Program Files\TrueCrypt\TrueCrypt Format.exe" /n from cmd. – John P – 2013-05-21T07:48:02.570

3

Windows 7 64 bit, I ran into the same problem - the command line switch (/n or /noisocheck) simply does not work with Truecrypt 6.3a. I tried the 64 bit and the 32 bit cmd.exe, both failed. The solution was to install the "Daemon Tools Lite" and to mount the rescue.iso once it was created. Truecrypt recognized the "rescue-CD" and continued. But even then after the necessary reboot the harddisk was not encrypted initially, because the automatically started TrueCrypt lacked administrator credentials. I had to end Truecrypt, restart as administrator, then to resume encryption (which will be finished in 7 hours..., I am waiting for the next problems...)

Michael Logies

Posted 2010-01-09T13:01:17.240

Reputation: 31

I'm using Windows 7 64-bit Professional. It didn't work at first but putting the filename in quotes in command prompt works. But I am using Truecrypt 7.0, so maybe my problem was unrelated. "TrueCrypt Format.exe" /n I also found disabling security software cut the encryption time in half, at least in my case. P.S. I'm new here and trying to comment on Michael Logies's answer. I apologize if this ends up somewhere else. – Defiant Noise – 2010-10-01T14:37:35.107

Daemon Tools Lite saved the day for me as well, +1! – Drew – 2013-02-27T00:49:32.133

1

Simple answer: Open the Run Dialog and type in the following:
"C:\Program Files\TrueCrypt\TrueCrypt Format.exe" /n. This will be the same as what you are doing, except it will skip the CD check.

It becomes your own responsibility to back up the ISO file to a different device, so you can burn it in the future if necessary.

I do not recommend this solution, unless, like me, you have sufficient backups so that losing all the data on your computer is acceptable, and won't take to much of your time to recover. If that is the case, you may even opt to just delete the ISO file.

Bryan Field

Posted 2010-01-09T13:01:17.240

Reputation: 487

0

The answer is below.

Open CMD, Navigate to C:\program files\TrueCrypt and -->TAB<-- along to "TrueCrypt Format.exe" and type /noIsocheck

so it would look like this:

C:\program files\TrueCrypt>"TrueCrypt Format.exe" /noisocheck

Daniel

Posted 2010-01-09T13:01:17.240

Reputation: 1

This duplicates another answer and adds no new content. Please don't post an answer unless you actually have something new to contribute. – DavidPostill – 2016-01-27T23:11:28.770

Could you plaese tell me which comment/anwer, my answer has duplicated? – Daniel – 2016-02-08T08:46:16.953

Read them yourself. At least two other answers say to use the /noisocheck option (which by the way you spelled incorrectly as /nosiocheck twice). – DavidPostill – 2016-02-08T09:20:52.270

Please check what it is you are saying. As you may know with IT the devil is in the detail. My answer is different because you have to put Quotes in between "TrueCrpt Format.exe" /Noisocheck. Please show me where is has that already stated. – Daniel – 2016-02-08T09:36:41.837

Its not just a case of putting /Noisocheck at the end. thats the whole point of this Post – Daniel – 2016-02-08T09:37:34.797

/noisocheck is the same as /n. Many of the answers and other comments correctly show the quotes and use the correct spelling. And your answer still doesn't work because of the spelling mistakes. – DavidPostill – 2016-02-08T09:44:30.583

None of the answers above show the correct placement of quotes along with the correct swicth nor the .exe at the end. the /n didn't work for me just as suspected. even the "answer" from Michael Logies with 3 upvotes says the command line switch (/n or /noisocheck) simply does not work with Truecrypt 6.3a" then goes onto use third party apps which is ridiculous. then you want to remove my post because it actually shows the correct answer. – Daniel – 2016-02-08T10:25:33.660

None of the above worked. because of their explanations or dont show proper way of using the command. use of third party apps. the answer i provided WORKS. and doesnt need third party apps – Daniel – 2016-02-08T10:26:31.530

I've already told your answer doesn't work and why. nosiocheck is not a valid switch because you have misspelt it – DavidPostill – 2016-02-08T10:34:13.020

OK, No ISOCHECK now shows correct spelling. – Daniel – 2016-02-08T10:38:23.057

The answer from George Bailey +John P doesn't show quotes on either side of TrueCrypt Format.exe" This didnt work for me.Michael Logies Uses third party apps and isnt helpful in a domain environment that is locked down. actually Andrew Heath's answer is correct but doesnt explain anything else about the rest of the command. but has no upvotes. the Answer from grawity is ridiculous. Doesnt answer the question but has upvotes!? Cmon guys this is ridiculous now. my answer is on point. – Daniel – 2016-02-08T10:38:39.907

Sorry Defiant Noise's comment is Correct not Andrew Heath – Daniel – 2016-02-08T11:43:26.720

0

The easiest way to to encrypt an entire partition with TrueCrypt without burning a cd is to install a virtual drive like Magic Disc (FREE). When the file is saved on your local computer simply mount the image as a cd and that will allow TrueCrypt to continue with actually burning a physical CD.

Notes: This was tested successfully on Truecrypt 7.1a

"Beware he who would deny you access to information, for in his heart, he dreams himself your master."

xymantec

Posted 2010-01-09T13:01:17.240

Reputation: 1