customize windows install for TrueCrypt software

[blackrabbit]

We are setting up some systems for a "proof-of-concept" project and some of the servers will be running TrueCrypt for encryption (not my part but thats what they told me). One of the requirements is that I leave the first 32kb of the system drive free for use by TrueCrypt. Someone said I have to do something during the installtion of Windows to make this happen. I've never had to do something like this before so I have no clue what to do. Is this a script or something I need to run during the windows install or something? Any help would be much appreciated. Thanks.

 

[TechyMcSe2k]

It sounds as if they want a 32kb partition 1 (almost as an OEM drive) and then a 2nd partition for your OS that would then start after the 32kb partition. hmmm...

 

[TechyMcSe2k]

Or is this a 32kb offset for the drive when installing the os... anyone have other ideas?

 

[blackrabbit]

I think its a 32kb offset at the beginning of the drive where i install windows. My specs only say 32kb free at beginning of the system drive.

 

[SteveRoadWarrior]

I didn't realize you could run TrueCrypt that way. I was under the impression you had two main modes it would use:

1. encrypt a giant file and map it as a drive letter
2. encrypt an entire volume

Starting unencrypted data after 32k would defeat the purpose of the exercise. So, we can safely assume they'll be encrypting that later. Without another OS running ahead of time, your Windows Volume won't be accessible, it will be encrypted. This basically means they'll have to make their own boot loader/shim that talks TrueCrypt, and unencrypts the volume in real time. It then hands off the boot process to a particular sector and things continue from there.

A similar thing happens if you install a commercial boot loader. However, the boot loader handles moving the data out of the way so the shim has room and gets priority. Really, they're asking you to do a function which should be handled by their software.

From what I know, there isn't a way to get a Windows computer (linux will do it) to start installation in anywhere but the first sector of the disk. If they insist that you do, you might be able to use a commercial partition program to move things around.

 

[allywilson]

It sounds like they're trying to do what McAfee SafeBoot does. We use it on our laptops.

http://www.safeboot.com/

 

[blackrabbit]

After speaking with the people we're setting this up for, they said it needs a 32kb partition infront of the partition we will install windows on. Whats the best way to go about doing this? I have a feeling I'll have to use some sort of third part disk partition software to do this. Anyone know of any free ones I can use?