Sunday, June 2, 2019

encryption - Moving the EFI and /boot partition

In a UEFI system the grub bootloader is located on the EFI partition then a /boot is also needed to be present and unencrypted.



I have a Dual boot Linux / Windows hard drive where Windows is encrypted with veracrypt and Linux with the builtin dm-crypt.
Is Veracrypt's bootloader along with an unecrypted Windows bootloader also located on the EFI?



I wanted to move the whole EFI partition and the /boot partition out of the hard drive to a usb device.
Can I do it with a simple 'dd' command and then delete the efi and boot partitions on the drive?
Will windows complain if I move this to a usb?

There is also a Recovery partition with windows but I assume that I shouldn't worry about that.
What do I get security-wise by performing this operation?

No comments:

Post a Comment

hard drive - Leaving bad sectors in unformatted partition?

Laptop was acting really weird, and copy and seek times were really slow, so I decided to scan the hard drive surface. I have a couple hundr...