Menu

Password less pre boot auth ?

Elclaudio
2019-01-02
2019-01-03
  • Elclaudio

    Elclaudio - 2019-01-02

    I'm trying to achieve, like the title said, to boot an encrpypted os (UEFI) without the need to type a password. Right now, the os is installed and boot while encrypted but it request the password every time I reboot. I would like to have the necessity to insert a usb key (with a keyfile ?) in order to validate the decryption, without asking for a password. I've haven't found any valuable information to do this, so I ask here : is it possible and if so, how ?

    ps: I don't want to use a yubikey because it emulate a keyboard and you are forced to push a button to "send" your predefined password

     
  • Alex

    Alex - 2019-01-02

    Probably this can help.

     <!-- AutoLogin 0/1 
        Posibility to avoid password prompt
        AutoPassword is  password by default
        Use it with PlatformLocked or TPMLocked enabled to lock password to the computer.
        -->
        <config key="AutoLogin">0</config>
        <config key="AutoPassword"></config>
    

    see DcsProp.example
    https://sourceforge.net/projects/dc5/files/beta/

     
    • Elclaudio

      Elclaudio - 2019-01-03

      thanks you very much, I wasn't aware of this. I've got it to work (autologin without password) while veracrypt efi bootloader installed on hdd, but when I move the EFI folder on a usb key (fat32 formated, BCD adjusted with bootice) it doesn't work anymore.

      At first, the auth failed, so I restored the keys from a rescue usb disk onto the usb containing booting efi files. Then, the auth was successfull, but just after that got an windows blue screen error 0xc000000f and can't boot any further.

      I may miss something here while transfering the boot logic onto the usb key ?

       

Log in to post a comment.

Want the latest updates on software, tech news, and AI?
Get latest updates about software, tech news, and AI from SourceForge directly in your inbox once a month.