From DiskCryptor wiki
Jump to: navigation, search

BartPE based LiveCD

Starting from version 0.2.6, DiskCryptor includes BartPE plugin that can integrate the program into Windows LiveCD, based either on Windows XP or Server 2003.

  1. Download PE Builder.
  2. Create "plugin\dcrypt" folder in PE Builder directory and copy there the content of "bartpe" folder located in the DiskCryptor's release archive.
  3. Run PE Builder, point it to the location of Windows distribution files, make LiveCD and burn it to a disk.

When booted from LiveCD, you will be able to run DiskCryptor from the BartPE menu, or to use the console version from the command prompt.

WinBuilder based LiveCD

Starting from version 0.9, DiskCryptor includes WinBuilder plugin that can integrate the program into Windows LiveCD, which can be based on Windows Vista or 7.

In the preparation of such LiveCD, you would need the following:

  • Download WinBuilder.
  • Get ready 32-bit Windows Vista/7 setup DVD
(at the time of this writing, WinBuilder projects on basis of which it is proposed to build Windows Vista/7 LiveCD, do not support building from 64-bit Windows Vista/7 setup DVD; the system itself where the building process is to be performed, can be 64-bit).
This package (WAIK) also supports Windows Vista (SP1 and later), and it does not require your Windows Vista installation DVD to have any service packs integrated into it.

Windows Vista

  1. Launch WinBuilder software, add checkbox to vistape.winbuilder.net project and start download.
    If you will start the download of full project, without modifying selection of individual components according to your needs, then it is possible, that the project would already contain DiskCryptor inside it (true at the time of this writing). If you want to take control into your hands and be sure of what is to be included into LiveCD (as it is not possible, immediately, to check the presence of valid digital signature on DiskCryptor files distributed with the project, as they are encoded inside a single file that also contains instructions for LiveCD integration), then use the instructions below.
  2. When download is completed, exit the program and copy files from "bartpe" folder inside DiskCryptor distribution, into Projects\VistaPE-CAPI\dcrypt project folder
(you would need to create "dcrypt" folder; you can also use a deeper path if you downloaded the full project, which would then already have the following structure — Projects\VistaPE-CAPI\Apps\Security, but this is not required).
  1. Launch WinBuilder:
    • Press "Source" button, and specify the path to Windows setup DVD or a folder with its files/folders — Source directory.
    • Press "Play" button.
  2. When operations are completed, there will be VistaPE-Core.iso file ready to be burned inside ISO folder.

Windows 7

  1. Launch WinBuilder software, add checkbox to rescue.w07.net/Projects project and start download.
    If you will start the download of full project, without modifying selection of individual components according to your needs, then it is possible, that the project would already contain DiskCryptor inside it (not true at the time of this writing). If you want to take control into your hands and be sure of what is to be included into LiveCD (as it is not possible, immediately, to check the presence of valid digital signature on DiskCryptor files distributed with the project, as they are encoded inside a single file that also contains instructions for LiveCD integration), then use the instructions below.
  2. When download is completed, exit the program and copy files from "bartpe" folder inside DiskCryptor distribution, into Projects\Win7RescuePE\dcrypt project folder
(you would need to create "dcrypt" folder; you can also use a deeper path if you downloaded the full project, which would then already have the following structure — Projects\Win7RescuePE\Apps\Security, but this is not required).
  1. Launch WinBuilder:
    • Press "Source" button, and specify the path to Windows setup DVD or a folder with its files/folders — Source directory.
    • Press "Script" at the top, then expand "Build" menu (to the left), click on "PreConfig" and press "Get Info".
    • Press "Play" button.
  2. When operations are completed, there will be Win7RescuePE.iso file ready to be burned inside ISO folder.

Windows Vista/7 setup DVD

It is also possible to integrate DiskCryptor directly into Windows Vista/7 installation DVD. By doing this, you would be able to run DiskCryptor from command prompt that is accessible from "Repair your computer" menu. When installing Windows from this modified setup disk, no changes made to it would make it into actual Windows installation.

To begin with, you would need to:

This package (WAIK) also supports Windows Vista (SP1 and later), and it does not require your Windows Vista installation DVD to have any service packs integrated into it.

When WAIK is installed, you would need to perform the following operations with administrative privileges:

  1. Copy the contents of Windows Vista/7 DVD into C:\WinSetupDVD folder.
  2. Create C:\WinSetupDVD-Servicing folder.
  3. Launch command-line interface (cmd.exe) and execute the command below that will mount Windows boot image:
    • "C:\Program Files\Windows AIK\Tools\x86\Servicing\Dism.exe" /Mount-Wim /WimFile:C:\WinSetupDVD\sources\boot.wim /index:2 /MountDir:C:\WinSetupDVD-Servicing
  4. Copy DiskCryptor files into mounted image:
    • dcapi.dll, dccon.exe, dcrypt.exe → C:\WinSetupDVD-Servicing\Program Files\dcrypt\
    • dcrypt.sys → C:\WinSetupDVD-Servicing\Windows\System32\drivers\
4.1. This step is not required for DiskCryptor ver 1.0 and above.
  1. Copy DiskCryptor file into mounted image:
    • dc_fsf.sys → C:\WinSetupDVD-Servicing\Windows\System32\drivers\
  2. Now we enter data into Windows Vista/7 setup DVD registry, which is necessary for DiskCryptor to function:
    • Launch registry editor (regedit.exe) and click on the HKEY_LOCAL_MACHINE hive. Go to File → Load Hive... and open file
C:\WinSetupDVD-Servicing\Windows\System32\config\SYSTEM
  • In the new dialogue window enter WinSetupDVD. Now when you expand HKEY_LOCAL_MACHINE hive, you could see a new entry WinSetupDVD that belongs to the Windows setup DVD.
  • Create WinSetupDVD.reg with the text below and run it.
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\WinSetupDVD\ControlSet001\Services\dcrypt]
"Type"=dword:00000001
"Start"=dword:00000000
"ErrorControl"=dword:00000003
"ImagePath"=hex(2):73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,64,00,\
  72,00,69,00,76,00,65,00,72,00,73,00,5c,00,64,00,63,00,72,00,79,00,70,00,74,\
  00,2e,00,73,00,79,00,73,00,00,00
"Group"="Filter"

[HKEY_LOCAL_MACHINE\WinSetupDVD\ControlSet001\Services\dcrypt\config]
"Flags"=dword:00000082
"Hotkeys"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"sysBuild"=dword:00000000

[HKEY_LOCAL_MACHINE\WinSetupDVD\ControlSet001\Services\dc_fsf]
"Type"=dword:00000002
"Start"=dword:00000000
"ErrorControl"=dword:00000003
"ImagePath"=hex(2):73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,64,00,\
  72,00,69,00,76,00,65,00,72,00,73,00,5c,00,64,00,63,00,5f,00,66,00,73,00,66,\
  00,2e,00,73,00,79,00,73,00,00,00
"Group"="Filter"

[HKEY_LOCAL_MACHINE\WinSetupDVD\ControlSet001\Control\Class\{4D36E965-E325-11CE-BFC1-08002BE10318}]
"UpperFilters"=hex(7):64,00,63,00,72,00,79,00,70,00,74,00,00,00,00,00

[HKEY_LOCAL_MACHINE\WinSetupDVD\ControlSet001\Control\Class\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
"LowerFilters"=hex(7):64,00,63,00,72,00,79,00,70,00,74,00,00,00,66,00,76,00,65,\
  00,76,00,6f,00,6c,00,00,00,00,00
If before making changes to the registry you were to look at the {71A27CDD-812A-11D0-BEC7-08002BE2092F} key, you would see that value "LowerFilters" already has data "fvevol" (true for both Windows Vista and 7), which when adding registry data (from a file) that is relevant only to the DiskCryptor, would be overwritten. Therefore the registry data provided below also includes original data for the said value.
  1. While in registry editor, click on the WinSetupDVD entry and go to File → Unload Hive... and exit from the registry editor.
  2. With the following command, we now commit the changes we made and unmount the image:
    • "C:\Program Files\Windows AIK\Tools\x86\Servicing\Dism.exe" /Unmount-Wim /MountDir:C:\WinSetupDVD-Servicing /commit
    In order for the image to be successfully unmounted, do not forget to exit from the registry editor and the program you used to copy DiskCryptor files, so no processes would remain attached to C:\WinSetupDVD-Servicing folder.
  3. The final operation will create a new Windows Vista/7 setup DVD with integrated DiskCryptor (when completed, ready to be burned WinSetupDVD-custom.iso file will be created in root folder of drive C:):
    • "C:\Program Files\Windows AIK\Tools\x86\oscdimg.exe" -n -m -bC:\WinSetupDVD\boot\etfsboot.com "C:\WinSetupDVD" "C:\WinSetupDVD-custom.iso"

Live USB

Windows Vista/7

To create bootable Windows Vista/7 USB flash drive on a basis of Windows ISO image created using either WinBuilder or integrating DiskCryptor into Windows installation DVD.

  1. Launch command-line interface (cmd.exe) with administrative privileges.
  2. Type diskpart, press Enter button and run the following commands:
    • list disk
    • select disk # where # is the corresponding number of your USB flash drive.
    • clean This will remove partition/volume formatting from the disk by zeroing sectors, and all data on the drive will be destroyed.
    • create partition primary
    • active
    • format fs=fat32 quick
    • assign
    • exit to leave DiskPart tool and then quit from the command-line interface.
  3. Now copy everything from an ISO file to your USB flash drive. You can do it, for example, by opening and extracting ISO file with 7-Zip archiver.
  4. When contents of ISO file have been copied, your USB flash drive is ready to be used, and you just need to set your computer to boot from USB flash drive.

Windows 10

Creating bootable Windows 10 USB flash drive

  1. Install DiskCryptor on the machine you'll want to create the WinPE image on.
  2. Download the Windows 10 ADK setup, install the "Deployment Tools" and "Windows Preinstallation Environment (Windows PE)" – components with it.
  3. Create dcrypt.reg file with the contents (e.g. on your desktop):
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\WinPE\ControlSet001\Services\dcrypt]
"Type"=dword:00000001
"Start"=dword:00000000
"ErrorControl"=dword:00000003
"ImagePath"=hex(2):73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,64,00,\
  72,00,69,00,76,00,65,00,72,00,73,00,5c,00,64,00,63,00,72,00,79,00,70,00,74,\
  00,2e,00,73,00,79,00,73,00,00,00
"Group"="Filter"

[HKEY_LOCAL_MACHINE\WinPE\ControlSet001\Services\dcrypt\config]
"Flags"=dword:00000082
"Hotkeys"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"sysBuild"=dword:00000000

[HKEY_LOCAL_MACHINE\WinPE\ControlSet001\Control\Class\{4D36E965-E325-11CE-BFC1-08002BE10318}]
"UpperFilters"=hex(7):64,00,63,00,72,00,79,00,70,00,74,00,00,00,00,00

[HKEY_LOCAL_MACHINE\WinPE\ControlSet001\Control\Class\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
"LowerFilters"=hex(7):64,00,63,00,72,00,79,00,70,00,74,00,00,00,66,00,76,00,65,\
  00,76,00,6f,00,6c,00,00,00,00,00
  1. Run Deploying and Imaging Tools Environment as an administrator, you'll find it in your start menu.
  2. Run the following commands to mount the WinPE – image to C:\winpe-servicing:
    • cd C:\Program Files (x86)\Windows Kits\10\Assessment and Deployment Kit\Windows Preinstallation Environment\amd64\en-us
    • mkdir c:\winpe-servicing
    • dism /mount-wim /wimfile:winpe.wim /mountdir:c:\winpe-servicing /index:1
  3. Now don't close the terminal yet, but open up Registry Editor (regedit.exe).
  4. Select HKEY_LOCAL_MACHINE, then open up the menu item File → Load Hive... and point it to C:\winpe-servicing\windows\system32\config\SYSTEM and when asked give it the name WinPE.
  5. Double-click on the dcrypt.reg file created earlier, and accept the changes.
  6. Go back to Registry Editor, select the WinPE -item under HKEY_LOCAL_MACHINE and go to File → Unload Hive... and exit the Registry Editor.
  7. Go to your existing DiskCryptor installation (C:\Program Files\dcrypt) and:
    • Copy the folder contents to C:\winpe-servicing\Program Files\dcrypt
    • Also copy the dcrypt.sys file to c:\winpe-servicing\Windows\System32\Drivers
    Make sure you close any explorer windows or command prompt windows you might have browsing the c:\winpe-servicing directory or any of it's subdirectories.
  8. Go back to the elevated command prompt and run:
    • dism /unmount-image /mountdir:c:\winpe-servicing /commit
If you get ANY errors during this point you failed with one or more of the above and you'll have to do it again, try very carefully following every instruction.

Now to make the WinPE USB stick. Insert your USB stick, make sure you know it's drive letter. In this example it is G:

CopyPE amd64 c:\WinPE_amd64
MakeWinPEMedia /UFD C:\WinPE_amd64 G:

That's it! If you need more files (e.g. the backup header) you can place them on the root of the USB stick and they'll be available in D: in the WinPE environment.

When you boot the USB stick you'll see a command prompt with winpeinit running, just wait until that finishes and then run (the keyboard layout might not be what you expect):

cd ..
cd ..
cd program files
cd dcrypt
dcrypt


Language: English  • Deutsch • русский