This project has moved. For the latest updates, please go here.

Do I need to decrypt my system partition for Windows 10 anniversary update?

Topics: Technical Issues, Users Discussion
Aug 6, 2016 at 6:22 AM
I'm currently running Windows 10 version 1511. My system partition is encrypted with VeraCrypt. For the upcoming Windows 10 anniversary update, do I need to decrypt my system partition, or will the update work fine with an encrypted system partition?
Aug 7, 2016 at 1:37 PM
I'm about to run the update on my system partition encrypted laptop. Will let you know how it goes.
Aug 7, 2016 at 2:20 PM
Edited Aug 7, 2016 at 2:23 PM
Don't expect it to work, you will most likely have to decrypt your system partition first.

See: https://veracrypt.codeplex.com/workitem/290
Aug 7, 2016 at 2:22 PM
Looks like the update failed, after going through the VC bootloader, you're dumped into the Windows Recovery Environment.
Another reboot later (without attempting any fixes) and Windows seems to have rolled back the update, it's back to 1511.

So, decrypting before a platform upgrade it is then!
Aug 9, 2016 at 12:01 AM
Yep same happened here in the mean time. Windows 10 forced the update and it failed after reboot. Luckily it didn't destroy the system partition but "gracefully" recovered back to the old version of Windows.
Aug 9, 2016 at 12:27 AM
According to the FAQ:

https://veracrypt.codeplex.com/wikipage?title=FAQ
Will I be able to mount my VeraCrypt partition/container after I reinstall or upgrade the operating system?

Yes, VeraCrypt volumes are independent of the operating system. However, you need to make sure your operating system installer does not format the partition where your VeraCrypt volume resides.

Note: If the system partition/drive is encrypted and you want to reinstall or upgrade Windows, you need to decrypt it first (select System > Permanently Decrypt System Partition/Drive). However, a running operating system can be updated (security patches, service packs, etc.) without any problems even when the system partition/drive is encrypted.
Aug 9, 2016 at 6:29 PM
I dont mind unencrypting and reencrypting - but has anyone actually run Veracrypt on 1607 yet? Im worried about decrypting, updating and then hitting something like this during re-encryption on 1607:

https://tech.slashdot.org/story/16/07/31/2146234/all-windows-10-kernel-mode-drivers-must-be-digitally-signed-by-microsoft
Aug 10, 2016 at 12:15 AM
The answer is yes.

https://veracrypt.codeplex.com/workitem/497

kudzu wrote:
Unencrypting, upgrading and then reencrypting does work. Kind of a PITA, but I don't see any easy fix that VeraCrypt could do to get past this.