Dual Boot Windows and Ubuntu with Secure Boot and Full Disk Encryption
A few months ago, I finally took the time to set up dual boot on my laptop. I would love to try Ubuntu as my daily driver again, while keeping the Windows OS just in case. I treated this as a learning opportunity and configured dual boot with secure boot still enabled and have full disk encryption configured for both operating systems.
I wrote this blog because I could not find a single guide explains all steps for secure boot and full disk encryption sequentially, and these steps interleave each other. So, I made some notes before the installation to ensure I am doing the right thing at the right time. For example, I won't accidentally skip a step about configuring secure boot when I am focused on following another guide about full disk encryption. This guide is a cleaned up version of the notes that I compiled for my dual boot set up.
I organized the whole flow into 6 general steps:
- Preparing in Windows: set boot mode, partition disk, etc.
- Configure BIOS: boot mode and other BIOS settings
- Configure Ubuntu Partition: boot and data partition
- Install Ubuntu: configure dual boot and mounting volumes correctly
- Set up
crypttab
for full disk encryption - Reboot and fix some other issues