VeraCrypt
aboutsummaryrefslogtreecommitdiff
path: root/doc/html/System Encryption.html
diff options
context:
space:
mode:
authorMounir IDRASSI <mounir.idrassi@idrix.fr>2019-12-16 12:10:40 +0100
committerMounir IDRASSI <mounir.idrassi@idrix.fr>2019-12-16 13:32:32 +0100
commitdda7ea60004cfb701cff3fbac97798a672d77523 (patch)
treea7beedc933ab838a254c24b85194517cb0c2c6c3 /doc/html/System Encryption.html
parent7aecbb225c8a6a7ff0378668e7f67aa508513173 (diff)
downloadVeraCrypt-dda7ea60004cfb701cff3fbac97798a672d77523.tar.gz
VeraCrypt-dda7ea60004cfb701cff3fbac97798a672d77523.zip
Documentation: Adding information of availability of RAM encryption and that in EFI mode we can't encrypt whole disk
Diffstat (limited to 'doc/html/System Encryption.html')
-rw-r--r--doc/html/System Encryption.html3
1 files changed, 2 insertions, 1 deletions
diff --git a/doc/html/System Encryption.html b/doc/html/System Encryption.html
index 676c2e19..ed92c717 100644
--- a/doc/html/System Encryption.html
+++ b/doc/html/System Encryption.html
@@ -65,7 +65,8 @@ Because of BIOS requirement, the pre-boot password is typed using <strong>US key
</strong>During the system encryption process, VeraCrypt automatically and transparently switches the keyboard to US layout in order to ensure that the password value typed will match the one typed in pre-boot mode. Thus, in order to avoid wrong password errors,
one must type the password using the same keys as when creating the system encryption.</div>
<p>Note: By default, Windows 7 and later boot from a special small partition. The partition contains files that are required to boot the system. Windows allows only applications that have administrator privileges to write to the partition (when the system is
- running). VeraCrypt encrypts the partition only if you choose to encrypt the whole system drive (as opposed to choosing to encrypt only the partition where Windows is installed).</p>
+ running). In EFI boot mode, which is the default on modern PCs, VeraCrypt can not encrypt this partition since it must remain unencrypted so that the BIOS can load the EFI bootloader from it. This in turn implies that in EFI boot mode, VeraCrypt offers only to encrypt the system partition where Windows is installed (the user can later manualy encrypt other data partitions using VeraCrypt).
+ In MBR legacy boot mode, VeraCrypt encrypts the partition only if you choose to encrypt the whole system drive (as opposed to choosing to encrypt only the partition where Windows is installed).</p>
<p>&nbsp;</p>
<p><a href="Hidden%20Operating%20System.html" style="text-align:left; color:#0080c0; text-decoration:none; font-weight:bold.html">Next Section &gt;&gt;</a></p>
</div>