I have a laptop running Windows 7 Ultimate. I have encrypted my drives using BitLocker. Now I have also installed Lubuntu along with Windows. But my encrypted drives are not visible in Linux. How can I fix this?
You can access BitLocker partition under Linux using Dislocker, an opensource driver which is using FUSE (or not).
For that, you need the file on a USB key (the one with the .bek extension) or the recovery password.
My problem was that I could not boot Windows, and I needed a way to access my files on a Bitlocked partition. In order to do this, you need a bitlocker recovery password (8 groups of digits) and the ability to boot your system from USB.
- Download and install
LiLion an other Windows machine (Linux Live USB Creator)
LiLiand have it download a lightweight
ubuntuimage. I chose
- Install the image to your USB stick.
- Boot the problematic machine with the USB stick
- When you see the ubuntu boot screen, press a key.
F6, set the following options:
- Make a folder
- Download and extract dislocker
sudo apt-get install libfuse-dev libmbedtls-dev
- change directory to the
sudo make install
- change directory to
sudo fdisk -l
- identify the partition which is bitlocked. Mine was
sudo dislocker -r -V /dev/sda1 -p315442-000000-000000-000000-000000-000000-000000-000000 -- /media/windows(replace your own bitlocker key and source partition)
- change dir to
sudo -iif you can't access it)
mount -o loop dislocker-file /media/mount
- You should now see your files in a mounted drive of the file manager.
Backups are fairly slow, but it might save some trouble if you do end up reinstalling windows. Good luck!
I just worked out a way to update Kali Linux and install
Using Kali Linux 1.0.9a i386 bootable DVD
Edit "/etc/apt/sources.list" and add:
deb http://us.archive.ubuntu.com/ubuntu trusty main universe
Install programs using Terminal:
apt-get update" apt-get install git libfuse-dev libpolarssl-dev # Continue through update text, allow services to restart if needed git clone git://github.com/Aorimn/dislocker.git cd /dislocker/src make make install
Find drive Bitlocker volume:
Make folders in /mnt:
dislocker -v -V /dev/<volume name> -p<Bitlocker key> -- /mnt/tmp
Check if file exists to confirm proper Bitlocker key:
dislocker-file if correct.
mount -o loop,ro /mnt/tmp/dislocker-file /mnt/dis
/mnt/dis for access to files.
BitLocker is a proprietary, closed-source drive encryption system only supported by Windows. You'll have to remove BitLocker encryption if you want to access your Windows partitions from Linux.
See What is the difference between disabling BitLocker Drive Encryption and decrypting the volume? for instructions on doing so. It would be advisable to have a backup of your data completed first.
Once the drive is decrypted, you can use TrueCrypt instead; reading a System Encryption volume under Linux isn't supported by default, but someone has figured out a work-around. See How to use TrueCrypt®-encrypted Windows system drives on Linux.
At the very least, review the TrueCrypt documentation and more specifically, the list of supported OSes.
Yet another option is PGP Whole Disk Encryption. See PGP Whole Disk Encryption for Dual Boot Linux and Windows XP.
The only thing I've found that might help you is NVbit. It's an experimental fuse driver that allows you to access BitLocker volumes. It's still in an alpha state, and it looks like you'll have to compile the code yourself. It also only allows read-only access, and some things might not work. I think it's your best bet, though.
To open a BitLocker device, use:
sudo cryptsetup open --type=bitlk <device> <name>
sudo cryptsetup bitlkOpen <device> <name>
Possible parameter values:
- device - /dev/sda1
- name - windows
Now you can mount the device with the following command:
sudo mount /dev/mapper/windows /path/to/mount/point
When setting up BitLocker on a device choose the option that encrypts the whole device (requires more time). The other option uses Encrypt-On-Write conversion model that makes sure that any new disk writes are encrypted as soon as you turn on BitLocker (data that existed on the device before encryption began can still be read and written without encryption) and is not supported by Cryptsetup.
You will get the following error when you try to open the device with Encrypt-On-Write conversion model:
BITLK devices with type 'encrypt-on-write' cannot be activated.