Ubuntu on a Bitlocker-protected environment

The world has become much simpler these days. One good example is the sheer simplicity, with which you can by now install an Ubuntu 10.04 on a machine that already has Windows 7 (no big news here) and where Windows is protected by Bitlocker and TPM-integration (that is new :) )

Some easy steps:
  • Install Windows 7 to your liking
  • Encrypt your system using Bitlocker, also using TPM.
I guess most readers interested in installing Ubuntu will start with the above setup. Now modify the system to allow a Ubuntu install:
  • Shrink your encrypted partition, for example I freed up about 40GB for my new Ubuntu
  • "Stop" Bitlocker (that is: Temporarily store the encryption key outside the TPM - you do NOT need to decrypt the drive.) - Your Action-Center will alarm you, that this is a risk.
  • Install Ubuntu 10.04 into the freed up disk space, allow installation of grub in MBR
  • Boot Windows an "Resume" Bitlocker (i.e. enable TPM)
Be aware: This works just fine, as long as there is no change to the boot environment. This means, before updating for example the "grub-pc"-Package (the Ubuntu-Bootloader), be sure to "stop" Bitlocker!

For the Linuxer: Changing settings of grub (like "/etc/default/grub") will not change the boot enviornment, as these settings are dynamicly read by grub.

Kommentare

  1. Jan Dittberner7. Januar 2011 um 06:33

    Thanks for this article. I can confirm that the same approach works well with Bitlocker encrypted Windows 7 Enterprise and Debian Squeeze.

    To keep apt from updating grub-pc by accident you can do

    echo "grub-pc hold" | sudo dpkg --set-selections

    AntwortenLöschen
  2. pkpdjh8. September 2011 um 14:09

    Thanks for this great article. It almost describes my situation.

    I already have Windows 7 and Ubuntu running on this machine using GRUB as the main bootloader.

    I have a TPM module in my computer and my IT people want me to use BitLocker when I use Windows. If I go ahead and enable BitLocker, I am afraid my MBR will get altered and I won't have GRUB anymore.

    How do you smart folks suggest I proceed?

    AntwortenLöschen

Kommentar veröffentlichen

Beliebte Posts aus diesem Blog

Using Visual Studio Code for PowerShell development

Bild
Historically, developing PowerShell code (that is more than just a handful of lines) is done using the "Integrated Scripting Environment" (ISE) which is installed together with PowerShell by default - on Windows.  Good ol' ISE The ISE does a good job. It offers IntelliSense (Auto-completion of cmdlets), basic debugging (Break-Points and Variable-inspection), online cmdlet search and definitions. Interactive / graphical extensions for some actions (like graphical progress bars). It can be dynamically extended, for a good example have a look at the ISESteroids by Tobias Weltner. Now, since PowerShell is since recently also available on other platforms than Windows and ISE does not meet the requirements of larger scale projects. For example, ISE has no understanding of projects consisting of multiple files (which is essential for creating modules or DSC ressources) or how to interact with version control system like Git . Enter Visual Studio Code  (VSCode); ...
Mehr anzeigen
Bild
Did you know, you can use a GPU (yes, that one in hardware!) with XenApp to publish apps that actually need Direct3D? No? No wonder, it is a rather new feature :) If made up a little sample at YouTube that shows a 3D-Model in Adobe Reader X and what happens, if you do not use the GPU (hint: They are called bounding-boxes).
Mehr anzeigen