Skip to main content

Using Full Disk Encryption with Windows installations on Apple machines - Kennisbank / ESET Endpoint Encryption - ESET Tech Center

Using Full Disk Encryption with Windows installations on Apple machines

Authors list

The granular encryption features of DESlock+ (email, file, folder, removable media etc.) are all available from Apple machines that are running Windows via Boot Camp or a virtual machine environment.

 

If your machine is using OSX alongside Windows hosted by Boot Camp then full disk encryption should not be used.

 

If your Apple system is running only Windows, effectively making it a normal Windows PC, then it may be possible to encrypt successfully using Full Disk Encryption.

 

While more recent Apple Mac systems provide their boot process through UEFI firmware, they offer a mode known as Hybrid MBR.  This allows the boot process as far as Windows is concerned to be in Legacy mode.  As with all processes of this kind you should ensure you have a full backup of the system before attempting encryption.

 

We have successfully installed and encrypted a system with the specifications detailed below:

  • OS: Windows 7 x64 SP1
  • Computer: MacBook Pro early 2011 (MC723LL/A)
  • DESlock+: v4.8.3

 

Known Issue

While encryption was successful on the above configuration, recovery using the methods detailed in KB211 or KB210 is not compatible and the recovery disk will not boot on the system. 

However use of the Ubuntu alternative recovery method detailed in the following article with the version of Ubuntu linked below was successful.

KB281 - How do I decrypt a system that only has UEFI boot mode?

http://releases.ubuntu.com/16.04.2/ubuntu-16.04.2-desktop-i386.iso

 

Related Articles

KB61 - What are the minimum system requirements for DESlock+?

Add a comment

Please log in or register to submit a comment.

Need a password reminder?