I'm trying to achieve, like the title said, to boot an encrpypted os (UEFI) without the need to type a password. Right now, the os is installed and boot while encrypted but it request the password every time I reboot. I would like to have the necessity to insert a usb key (with a keyfile ?) in order to validate the decryption, without asking for a password. I've haven't found any valuable information to do this, so I ask here : is it possible and if so, how ?
ps: I don't want to use a yubikey because it emulate a keyboard and you are forced to push a button to "send" your predefined password
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
<!-- AutoLogin 0/1 Posibility to avoid password prompt AutoPassword is password by default Use it with PlatformLocked or TPMLocked enabled to lock password to the computer. --><configkey="AutoLogin">0</config><configkey="AutoPassword"></config>
thanks you very much, I wasn't aware of this. I've got it to work (autologin without password) while veracrypt efi bootloader installed on hdd, but when I move the EFI folder on a usb key (fat32 formated, BCD adjusted with bootice) it doesn't work anymore.
At first, the auth failed, so I restored the keys from a rescue usb disk onto the usb containing booting efi files. Then, the auth was successfull, but just after that got an windows blue screen error 0xc000000f and can't boot any further.
I may miss something here while transfering the boot logic onto the usb key ?
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
I'm trying to achieve, like the title said, to boot an encrpypted os (UEFI) without the need to type a password. Right now, the os is installed and boot while encrypted but it request the password every time I reboot. I would like to have the necessity to insert a usb key (with a keyfile ?) in order to validate the decryption, without asking for a password. I've haven't found any valuable information to do this, so I ask here : is it possible and if so, how ?
ps: I don't want to use a yubikey because it emulate a keyboard and you are forced to push a button to "send" your predefined password
Probably this can help.
see DcsProp.example
https://sourceforge.net/projects/dc5/files/beta/
thanks you very much, I wasn't aware of this. I've got it to work (autologin without password) while veracrypt efi bootloader installed on hdd, but when I move the EFI folder on a usb key (fat32 formated, BCD adjusted with bootice) it doesn't work anymore.
At first, the auth failed, so I restored the keys from a rescue usb disk onto the usb containing booting efi files. Then, the auth was successfull, but just after that got an windows blue screen error 0xc000000f and can't boot any further.
I may miss something here while transfering the boot logic onto the usb key ?