How do I encrypt TUXEDO OS during installation? - TUXEDO Computers

In this article we will show you how to encrypt your TUXEDO OS during installation, whether single or dual boot together with Windows or another distribution. You can find out what you need to know about encryption if ordered with the device or with WebFAI in a separate article in our knowledge base.

TUXEDO OS in its latest version offers you the option of encrypting your installation when you start the installer. We use LUKS2, the standard procedure for hard disc encryption under Linux. This works with TUXEDO OS alone or in a dual boot with Windows or another Linux distribution. In this article, we will go through the encrypted installation of TUXEDO OS in a dual boot with Windows. This

Starting point

Our starting point is an installed Windows and a TUXEDO OS started in live mode. If you prefer to install TUXEDO OS alongside another Linux distribution instead of Windows, the procedure described here does not change. other than the parts that pertain directly to Windows. It does not matter whether you have already created a partition for TUXEDO OS or whether Windows occupies the entire disc. Our script will create a new partition for you if required.

Requirements

In our example, we assume a Windows installation that occupies the entire disc. However, even if a partition has already been created for TUXEDO OS, it may be too small or too large. Even then you are in the right place with these instructions, because you either reduce the size of the Windows partition to make room for TUXEDO OS or you adapt an existing empty space. If you already have an appropriately sized partition or empty space, skip this part of the instructions and continue with the installation straight away.

The practice

Firstly, download the ISO with TUXEDO OS from our download portal. A separate article from our knowledge base explains how to write the downloaded ISO image onto a USB stick and start your notebook with it.

Once TUXEDO OS has started, first set the language and keyboard layout. You will then be taken to the desktop, where you will find the icon for the installer in the top left-hand corner. When you start the installer, you will first be asked whether you want to encrypt your system. Read through the details first. If you agree, click on Encrypted installation.

The next window is about the type of installation. Should TUXEDO OS occupy the entire disc or should it share the disc with an existing installation? As we are aiming for a dual-boot installation with an existing Windows in the example, we select Install in parallel here. This is also the option of choice for an existing Linux distribution.

BitLocker activated?

Then restart your TUXEDO OS ISO and start the installation again. As there is now already a sufficiently large area or an already formatted partition for TUXEDO OS, you will immediately see the suggested partition layout and can change the file system if necessary. If you are not using BitLocker, continue with the installation as described below.

In our example, Windows occupies the entire hard drive. We therefore select the largest partition /dev/nvme0n1p3 and click on Resize/Move at the top If you have not created a restore point for Windows, you should avoid moving partitions if possible. In our tests, Windows was irreparably damaged several times, but enlarging and shrinking a partition works without any problems.

In the next window, specify how the previously selected partition is to be changed. In our case, we want to reduce the size of this partition by 350 GB.

After entering the corresponding values and clicking OK, you will see your settings in the new window. To execute these settings, click on Apply in the top left-hand corner. Confirm the warning displayed and the action, in our case the shrinking of the Windows partition, will be executed within a few seconds.

You will normally receive a success message, which you confirm. The tool then adapts the view and shows the new partition layout. The area that you have just created for TUXEDO OS is shown as not used next to the size specification.

You can now close the partitioning tool and receive an overview of the partitions that will be changed during the subsequent installation. Here is your last change to change the file system from the standard Ext4 to Btrfs or XFS. You will then be asked to enter a password for the LUKS encryption.

After you have repeated the encryption password, the installation starts with the creation and formatting of the partitions, followed by the normal installation with the Calamares installer familiar from TUXEDO OS. The reboot into the installed system after the installation starts TUXEDO OS automatically from the GRUB boot loader, unless you select Windows or another installed operating system manually. After entering your encryption password, TUXEDO OS will open and you can set up your new system.

We often receive enquiries as to whether an already installed TUXEDO OS can be subsequently encrypted. This can be done in Windows and Linux, but in Linux it is not for the faint at heart. However, you can back up your home directory and other important data and then paste it into a newly installed encrypted system.