Windows 7: Portable Encryption of OS Partitions

TrueCrypt does not allow to encrypt the OS Partition because there is no 32KB space available in the beginning of the drive.

My question;

If I use Portable TrueCrypt,
Can I encrypt all partitions on the drive or all of the drive which has OS Partitions using this Portable TrueCrypt and when I am going to use the drive(s) again, I will completely decrypt the drive(s) / partitions from this Portable TrueCrypt.

(I am going to put my computer in a storage place. The thing is the place is not safe. So, I will not use the encrypted HDD which have my OSs in it. I just want to keep it encrypted in the storage place. So, waiting for it to decrypt the whole drive when I am going to use it, is not a problem. This will be probably one time encryption before I put it in the storage and one time decryption process when I get it back).

Can TrueCrypt Portable (or Traveller Disk) boot a computer and encrypt and decrypt the whole drives without needing an OS?

I guess the question here is that can this Portable TrueCrypt boot the computer and decrypt the whole drive? And is it safe to encrypt OS Partitions or the drive with the OS Partitions with Portable TrueCrypt?

Do you have any ideas about this?



If it is possible, how much do you think it will take to encrypt 8 TB? (I am thinking to encrypt my external drives with Portable TrueCrypt too).

Do you have any idea for this one time encryption and decryption of Internal and External Harddisks?

Hi,

Forget it - you are talking days to encrypt that amount of data. If you have a power failure during that time..........

If you absolutely must, use System Encryption (page 33 in attachment) - its complicated and has risks, so if you aren't sure, I would advise against this.

A less riskier method of securing your computer is to remove the HDD, and store that elsewhere, or simply limit the ability of someone to boot into your system using this:

SysKey - Set Startup Password to Lock or Unlock Windows

Regards,
Golden

Thanks.

I remember there was a software for Windows, Mac and Linux which was only setting a password for the drive. You would install it on every operating system on the computer to reach your data, but I do not remember that software and I couldn't find it on search engines.

I can't do system encryption because TrueCrypt is asking 32KB empty space at the beginning of the drive and informing me that I don't have it. I have a GPT Disk with a 200 MB GPT Protective Partition at the beginning.

All I want to do is set a password for the drives or a software that can boot from USB or CD to lock/unlock the drives/partitions.

I have 2 internal disks (1 for operating systems and 1 for data) and 4 external drives (not flash, big drives) that I want to protect if they are found.

I don't even want to deal with encrypting, I am just interested in locking the drives; but only option I found on the internet was encryption and only one with a little bit of explanations is TrueCrypt.

Thank you for the attachment and locking Windows suggestion.

I am still thinking what I am going to do. I need to make it in a way that the data in the drives won't be able to read by let's say a Live USB or CD or on another machine. I don't care if they format it as long as they can't read the data.

Hi,

In that case, why not just create a Macrium image of the drives on an external USB drive for storage elsewhere, then wipe the internal drives prior to putting the PC into storage.

Disk - Clean and Clean All with Diskpart Command
Imaging with free Macrium

Regards,
Golden

I can't store it anywhere else. I won't have any place to put them (I won't even have a place to put myself, forget about putting those drives).

I have only one place to leave my computer and its accessories (which is most of my possessions except the musical equipment). So, there is no other place. They will be in a luggage somewhere (I am only taking the flash drives with me). So, I need a way of some encryption or locking the drives.

Hi,

In that case, use the Startup Password, and also see if your BIOS has a password option.

Regards,
Golden

I will use that startup password option.

Unfortunately, my BIOS does not have HDD Password option (It has a password for boot though [a setup password that can be setup to ask at every restart to use the machine]; so they won't be able to use my machine, but they will be able to use another machine to read the data in the internal drives).

I was just thinking of that. I could put my drives in another computer and lock them, but then I would need the same computer or the same model computer when I take back my items which will be when I don't know. I could use an older computer to put with the drives so that I can use that computer's drive lock option maybe.

For the external drives, I don't know what am I going to do yet. Actually, for the internal drives too. Luckily, I still have some time before putting my stuff there. So, I hope I can think of some thing to do.

It is a little complicated issue since I have to put all of my stuff in one luggage. If I use a USB or CD for recovery; I would have to keep at least 1 in the luggage, 1 with me. If it can be copied, on the Internet, or in the encrypted flash drive.

Thank you very much for your replies. Even though, I haven't decided what I am going to do yet, every reply is giving me another thought of pros and cons of taking an action.

Hi,

One last suggestion which will definately work:

1. Create a Macrium Image on an external drive as suggested.
2. Use 7ZIP to zip this image with minimal compression (storage)....but....choose the password option



3. Wipe the internal disks using DISKPART prior to storage.

So, all that is left are several .ZIP files on the external which cannot be accessed without the password - quite safe.

Regards,
Golden

Thanks. That sure would solve the problem with the internal drives.

How about locking the external drives (At least some). That shouldn't be hard I suppose. Some password software maybe. Or creating a folder which is encrypted with a password. I can put everything I want in that folder and protect it with a password?

Am I going right about the external drives? Do you have any ideas?

Hi,

For the externals, use the same procedure - place everything into .ZIP with a password.

Regards,
Golden