Disable and Warn when Fast Startup Enabled
Open source disk encryption with strong security for the Paranoid
Brought to you by:
idrassi
Menu
▾
▴
#180 Disable and Warn when Fast Startup Enabled
Hello Mounir,
I am recreating the ticket from CodePlex regarding VeraCrypt disable Windows Fast Startup and provide user with a warning message as to the reason for the change since users keep posting about volumes automounting without password when they boot/reboot.
I would like to propose an idea to disable Windows 10, 8.1, and 8 Fast Startup due to users are unaware of the ramifications to VeraCrypt. The warning can list the issues to VeraCrypt.
- Prevents System Favorites from working.
- Windows does not shutdown completely leaving security issues by not prompting password for VeraCrypt volumes and leaving VeraCrypt volumes mounted.
- Other issues?
My understanding is you can control Fast Startup in the registry.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Power
Creating or setting the DWORD key called HiberbootEnabled with the value 0 will turnoff Fast Startup.
I know you do not like to automatically make changes without the user's consent, so you could prompt the user with Accept/Decline to have VeraCrypt disable Fast Startup.
The next decision to consider is when to warn the user and allow disabling of the warnings.
Does VeraCrypt warn each time a volume is mounted (since Windows does not shutdown completely, VeraCrypt executable is merely resumed and not restarted)?
Kind Regards.
Disabling OS features or annoying the user with warning messages does not seem a good path in solving the issue.
But it is much much more annoying that I had to mount all drives manually after windows has started. I was happy after I got this info to fix this problem. One solution could be to give the warning until the issue is fixed.
New issue of RAM encryption on VeraCrypt system encrypted with Fast Startup enabled.
https://sourceforge.net/p/veracrypt/discussion/technical/thread/d71190471c/
Hello Mounir,
Since users may perform system encryption and/or create non-system volumes on existing VeraCrypt installations or a Windows update/upgrade re-enables the Fast Startup, are you planning to add warning with the option to disable whenever the user performs system encryption and creating VeraCrypt non-system volumes?
Last edit: Enigma2Illusion 2020-07-21
For now, I only perform the check during installation/upgrade of VeraCrypt but extending this to the creation of volume and the system encryption would be good. I was wondering what is the best approach since doing this at mount time would be annoying and disabling Fast Startup requires administrative privileges that we don't have unless we ask for elevation which also can be annoying.
I will implement the proposed approach.
A suggestion: you could remember the restart timestamp (systeminfo | find "Boot Time") that was in effect when the volume was mounted. If the current restart timestamp does not match, then umount the volume, forget all caches, etc...
@idrassi
This ticket can be closed since you implemented the feature.
The warning message is scary and cryptic. It should at least link to the help file to explain the potential issues.
But I don't think the logic behind it is necessarily relevant to some/most users. Wouldn't it make more sense for VeraCrypt to watch for shutdowns or restarts, then act as needed, like dismount volumes?
hi idk what happen but i use veracryp and my pc just turning on and off pls can someone help me?