This document belongs to Manual Full System Encryption (with Extras): Detailed Process.

1. EFI screen

When you turn on your computer, you will see a screen that looks like this.


You can either wait five seconds or press any key (except Esc or Escape).

2. OS selection prompt

Next, a prompt is displayed.


If you do nothing, after 10 seconds, Ubuntu will start.

Otherwise, use your up-arrow and down-arrow to select the system you want (Ubuntu or Windows in this example; the other two options are for advanced use only). Press Enter to continue.

3. System passphrase prompt

Finally, you are prompted for the system passphrase.


Type your system passphrase (not your data passphrase or your Ubuntu login password). Nothing will be displayed on the screen while you type.

  • Careful: if you enter the system passphrase incorrectly, you will see an error, and the only thing that you can do is to press Ctrl+Alt+Delete to reboot and try again!

  • If you think that you have typed something incorrectly, before you press Enter, press the Backspace key enough times (or more) to rub out whatever you typed, and start again.

  • On some hardware, the numeric keypad is not activated at this point. So, if you wish to use the numeric keypad, you might find that you must press Num Lock. You'll have to figure whether or not you need this out on your own hardware; or just use the number keys above the letters.

Press Enter when finished. The computer might take several seconds — or even a minute — to continue, because it has to decrypt the data before continuing.

4. Windows error

When you select Windows, you will get a strange error message.


Ignore the error. Just press any key to continue into Windows.

5. Refresh Grub after updates

Make a note of the following and remember it!

(See Known Bugs.)

  • Whenever either of the following occurs in Linux…
    1. You upgrade the Linux kernel; or
    2. A software update asks you to restart your computer
  • before you restart your computer, open a terminal and enter the following command (which was created in the script to refresh Grub).

    • sudo /usr/local/sbin/refreshgrub

If you forget to do this, you will need to proceed according to the Troubleshooting section.

ManualFullSystemEncryption/DetailedProcessCheckAndFinalise (last edited 2017-05-26 18:15:02 by paddy-landau)