Activity for DJ Bonez
-
DJ Bonez posted a comment on discussion Technical Topics
Thank you, Alex. Sucessfully recovered gpt_enc.
-
Thanks a lot. I already tested -srdump, but there were hundreds of files created. Parameter <SFX> is number of security regions, isn't it?
-
Hey Alex, is there a possible solution to get a GPT file out of running hidden OS? I lost my backup of gpt_enc, but still have one authorization USB to boot into hidden OS. Of course I don't know the exact position of gpt_enc on SR or anything else. Thanks in advance Bonez
-
Here you are. Regards DJ Bonez
-
Thank you! Everything is running fine now. :-)
-
I don't like to decrypt whole system, since I am using SSD harddrive. I don't want to write any more than necessary unencrypted data to it. I used this script and successfully upgradet Windows to version 1709. But now VeraCrypt doesn't mount the system favorites automatically at start, although I select the option. Does anyone has an idea to deal with this problem? Regards DJ Bonez
-
If it runs in UEFI mode, of course you can boot from efi shell. Create directory /EFI/Shell/ on VeraCrypt RescueDisk Put Shell.efi into this directory Plug in RescueDisk and boot laptop Press (probably) F2 to enter UEFI menu and move VeraCrypt Loader (EFI USB) to first position in boot order Let laptop boot from USB Press s and enter to start Shell.efi
-
Unfortunately I didn't tried picture password yet. Maybe it will follow with next try on VM.
-
Unfortunately I didn't tried pircture password yet. Maybe it will follow with next try on VM.
-
I'm sorry, my guide didn't helped you. I really spend a lot of time to make it as understandable as possible. But I didn't understand your problem either: 1. Changing partition type to Recovery or ESP is detailed described - literally step by step. (Step 5.10.) 2. I don't think, it's a mentionable problem, how to change the name of a partition, since it isn't related to disk encryption. But of course you should NOT have to search for complicated informations - but actually there really is no need...
-
I'm sorry, my guide didn't helped you. I really spend a lot of time to make it as understandable as possible. But I didn't understand your problem either: 1. Changing partition type to Recovery or ESP is detailed described - literally step by step. (Step 5.10.) 2. I don't think, it's a mentionable problem, how to change the name of a partition, since it isn't related to disk encryption. But of course you should NOT have to search for complicated informations - but actually there really is no need...
-
I'm sorry, my guide didn't helped you. I really spend a lot of time to make it as understandable as possible. But I didn't understand your problem either: 1. Changing partition type to Recovery or ESP is detailed described - literally step by step. (Step 5.10.) 2. I don't think, it's a mentionable problem, how to change the name of a partition, since it isn't related to disk encryption. But of course you should NOT have to search for complicated informations - but actually there really is no need...
-
Step by step guide: Creating hidden OS in UEFI mode (v2.0)
-
Here you are. Regards DJ Bonez P.S.: 1HXpz86p4pUK3MkrGQvJLp9X3oSvkBrzst ;-)
-
At your special request I created this manual. Please leave feedback after success. Regards DJ Bonez
-
Ordinary OS and hidden OS are both running fine now. Thank you! Writing SR for booting ordinary OS with authorization USB was successful proceeding steps 20 to 23 of Felis' manual. But I still can't explain the "No Media" problem in my attemps before. If I use gpt_hidden, which was created in last step of "-oshideprep", I am able to remove GPT by "-pz". But I can not encrypt file for writing to SR, since password for ordinary OS isn't beeing accepted. Regards Bonez
-
Thanks Felis, hadn't read every comment here. Indeed it was the same problem you had before. I couldn't mount hidden OS in VC portable since the GPT table of system drive was already overwritten. But gpt_enc doesn't look well for me regarding check by "-pl" and "-pexec". I am going to try again. ;-)
-
Actually I got a more important new problem. I tried to create new hidden OS on same location like before. Decoy OS was already encrypted. After whole precedure, to be exact after restoring header of decoy OS, like described in our manuals, I got the following error message trying to boot into hidden OS. Regards Bonez
-
Seems to be an error message from EFI shell.
-
Thanks Felis, great manual. Maybe I can add some ideas after my next run with Hidden OS. ;-) @Alex: It should be possible to remove Decoy OS header from disk, shouldn't it? So it wouldn't be possible to boot any OS without USB anymore. Still don't get header of ordinary OS to SR. If I try to use the GPT file created in last step of "-oshideprep", password for ordinary OS isn't being accepted for encryption. After creating new GPT file from system drive and removing GPT info, password is being accepted...
-
Thanks Felis, great manual. Maybe I can add some ideas after my next run with Hidden OS. ;-) @Alex: It should be possible to remove Decoy OS header from disk, shouldn't it? So it wouldn't be possible to boot any OS without USB. Still don't get header of ordinary OS to SR. If I try to use the GPT file created in last step of "-oshideprep", password for ordinary OS isn't being accepted for encryption. After creating new GPT file from system drive and removing GPT info, password is being accepted but...
-
Thanks Felis, great manual. Maybe I can add some ideas after my next run with Hidden OS. ;-) @Alex: It should be possible to remove Decoy OS header from disk, shouldn't it? So it wouldn't be possible to boot any OS without USB. Regards Bonez
-
Thanks Felis, great manual. Maybe I can add some ideas after my next run with Hidden OS. ;-) @Alex: It should be possible to remove Decoy OS header from VeraCrypt Bootloader, shouldn't it? So it wouldn't be possible to boot any OS without USB. Regards Bonez
-
Hi Alex, I think the proper commands should be the following: 1. Copy gpt_hide (created in last step of "-oshideprep") to os_hdr 2. Remove SR data except header from os_hdr: EFI\VeraCrypt\DcsCfg.dcs -pf os_hdr -pz 3. Encrypt header before adding to SR: EFI\VeraCrypt\DcsCfg.dcs -pf os_hdr -pe -rnd 4. Add header to SR <N> on authorization USB <usbN>: EFI\VeraCrypt\DcsCfg.dcs -pf os_hdr -sra <N> -ds <usbN> Is this correct? I am going to wipe data and create new hidden OS because of damaged OS. In new...
-
Hi Alex, I think the proper commands should be the following: 1. Copy gpt_hide (created in last step of "-oshideprep") to os_hdr 2. Remove SR data except header from os_hdr: EFI\VeraCrypt\DcsCfg.dcs -pf os_hdr -pz 3. Encrypt header before adding to SR: EFI\VeraCrypt\DcsCfg.dcs -pf os_hdr -aa -pe -ps 4. Add header to SR <N> on authorization USB <usbN>: EFI\VeraCrypt\DcsCfg.dcs -pf os_hdr -sra <N> -ds <usbN> Is this correct? I am going to wipe data and create new hidden OS because of damaged OS. In...
-
Hey, same problem like I had a time ago. Alex wrote: It is possible to write SR without GPT. save GPT + header for ordinary encrypted OS. remove GPT from saved file. Encypt. Add to USB I did not successfully test it yet. Regards Bonez
-
Thank you for your fast reaction. Yes, I'd like to boot ordinary OS with regular password, whether USB with SR is connected or not. So in sense of plausible deniability I could demonstrate regular booting, although stick maybe is identified as a key. So I thought, I have to write the GPT table with hidden volume to one SR on USB. Loader is searching for SR, founds SR 2 and SR 3 on USB connected -> SR 2 with password 1 = ordinary OS; SR 3 with password 2 = hidden OS. But GPT_HOS (GPT table with hidden...
-
Hey Alex, I actually got new questions about hidden OS in EFI. Is it possible to save GPT table with hidden partitions in security region of an USB stick, too? Like described in my scenario, I'd like to boot regular OS, when USB with SR is connected and regular password is used. At the moment, when USB stick is connected, regular OS is not bootable from VeraCrypt loader. I already tried with "DcsCfg.dcs -pf gpt_hos -sra <SR> -ds <USB>", but gpt_hos is not encrypted and I do not know which password...
-
Hey Alex, I actually got new questions about hidden OS in EFI. Is it possible to save GPT table with hidden partitions in security region of an USB stick, too? Like described in my scenario, I'd like to boot regular OS, when USB with SR is connected and regular password is used. I already tried with "DcsCfg.dcs -pf gpt_hos -sra <SR> -ds <USB>", but gpt_hos is not encrypted and I do not know which password I have to use. How do I created a new USB stick with the GPT table for hidden OS? I used the...
-
Thanks Alex, everything is running fine now. Although I protected ESP by converting to recovery partition I had to restore VeraCrypt loader and volume header of ordinary OS after hidden OS encryption was done. I'll save GPT tables on separate device like recovery disks of the systems. Thanks for the info. Have a nice weekend! P.S.: HiddenOS.pdf describes, how I created hidden OS. Maybe this could help some other users.
-
Thanks Alex, everything is running fine now. Although I protected ESP by converting to recovery partition I had to restore VeraCrypt loader and volume header of ordinary OS after hidden OS encryption was done. I'll save GPT tables on separate device like recovery disks of the systems. Thanks for the info. Have a nice weekend! P.S.: HiddenOS.pdf describes, how I created hidden OS. Maybe this could help some other users.
-
Thanks Alex, everything is running fine now. Although I protected ESP by converting to recovery partition I had to restore VeraCrypt loader and volume header of ordinary OS after hidden OS encryption was done. I'll save GPT tables on separate device like recovery disks of the systems. Thanks for the info. Have a nice weekend! P.S.: HiddenOS.pdf discribes, how I created hidden OS. Maybe this could help some other users.
-
Thanks Alex, everything is running fine now. Although I protected ESP by converting to recovery partition I had to restore VeraCrypt loader and volume header of ordinary OS after hidden OS encryption was done. I'll save GPT tables on separate device like recovery disks of the systems. Thanks for the info. Have a nice weekend!
-
Thank you very much for your response, Alex. I think, I'm close to finish my project. But there are still a few questions: Why it is probably better to use up to 8 possible security regions on authorization USB? EFI\VeraCrypt\DcsCfg.dcs -pf gpt_enc -sra 0 -ds 1 writes encrypted gpt_table to security region 0 on device 1. Is there any reason to use any other or more than one security region on device? Is it possible to protect security regions from changes? Are they going to be damaged when formatting...
-
Hey guys, I started another try today. But again I didn't get finished. I used the instructions of the installation scenario in 2.1.3 from disk_encryption_v1_2.pdf. Protect ESP - check. Create partitions for hidden OS - check. Install H_OS and VeraCrypt in H_OS - check. Start system encryption - check. Modify encryption range to include outer volumes Here is where the problem started. I executed EFI\VeraCrypt\DcsCfg.dcs -oshideprep -rnd 2 a) Start of outer: Outer_Start b) End of outer: Outer_End...
-
Hey guys, I started another try today. But again I didn't get finished. I used the instructions of the installation scenario in 2.1.3 from disk_encryption_v1_2.pdf. Protect ESP - check. Create partitions for hidden OS - check. Install H_OS and VeraCrypt in H_OS - check. Start system encryption - check. Modify encryption range to include outer volumes Here is where the problem started. I executed EFI\VeraCrypt\DcsCfg.dcs -oshideprep -rnd 2 a) Start of outer: Outer_Start b) End of outer: Outer_End...
-
Hey guys, I started another try today. But again I didn't get finished. I used the instructions of the installation scenario in 2.1.3 from disk_encryption_v1_2.pdf. Protect ESP - check. Create partitions for hidden OS - check. Install H_OS and VeraCrypt in H_OS - check. Start system encryption - check. Modify encryption range to include outer volumes Here is where the problem started. I executed EFI\VeraCrypt\DcsCfg.dcs -oshideprep -rnd 2 a) Start of outer: Outer_Start b) End of outer: Outer_End...
-
Hey guys, I started another try today. But again I didn't get finished. I used the instructions of the installation scenario in 2.1.3 from disk_encryption_v1_2.pdf. Protect ESP - check. Create partitions for hidden OS - check. Install H_OS and VeraCrypt in H_OS - check. Start system encryption - check. Modify encryption range to include outer volumes Here is where the problem started. I executed EFI\VeraCrypt\DcsCfg.dcs -oshideprep -rnd 2 a) Start of outer: Outer_Start b) End of outer: Outer_End...
-
Any suggestions?
-
Hello Alex, thank you very much for your support. I unfortunately hadn't enough time to continue my plan last weeks. At the moment there are three partitions on my disk: The boot loader, my primary OS and a data partition, which is mounted at booting primary OS. There is still enough free space to implement a hidden OS, of course, since I still want to do it. If I understand correctly, I now have to backup first 260 MB (EFI) in front of my primary OS or simply convert it to a recovery partition....
-
Hello Alex, thank you very much for your support. I unfortunately hadn't enough time to continue my plan last weeks. At the moment there are two partitions like described in my first post: My primary OS (with EFI in front of it) on partition 1 and a data partition, which is mounted at booting primary OS. There is still enough free space to implement a hidden OS, of course, since I still want to do it. If I understand correctly, I now have to backup first 260 MB (EFI) in front of my primary OS or...
-
I refer on this project: https://sourceforge.net/projects/dc5/files/beta/ Maybe someone could explain me what to do exactly. For example I don't know, what S62 means and how to create these masterkeys, etc.
-
Hello guys, looking forward to find any suggestions to get my actual plan done. I'd like to organize my new Samsung 850 Evo SSD like this in EFI mode: | 1. Windows Partition | 2. Data Partition | 3. Hidden OS | Partition should be secured by PBA password. Data Partition should be mounted from OS on 1. partition. Hidden OS should only be mounted when USB with key is plugged and correct password is entered. So if... ... USB key is plugged and password 1 is entered -> starting OS on 1. partition ......
1