12.10 Windows 8 dual boot UEFI ~ no Windows entry in grub menu

[YannBuntu]

Hello

What should I try to get Secure Boot working?

First, be aware that SecureBoot is recent, and GRUB/Ubuntu/Boot-Repair are not always able to work with SecureBoot enabled.
But we can have a try.
Please enable SecureBoot in your BIOS, then run Boot-Repair --> Advanced Options --> "GRUB options" tab --> tick "SecureBoot" --> Apply.
Tell us the new URL that will appear.
Reboot, and tell us what you observe.

[kevin1]

Thanks for your reply, YannBuntu.

I booted live ubuntu-secure-remix-12.10-64bit.iso on USB with Secure Boot Enabled and executed sudo apt-get update; sudo apt-get install boot-sav boot-repair.

After starting boot-repair the following messages were displayed: 'EFI detected. Please check the options.' and '/boot detected please check the options'.

In advanced options the Grub Locations, Grub Options and MBR Options tabs are greyed-out and empty.

Is this the end of the road?

Thanks,

Kevin

[oldfred]

I think it is the encryption and lvm partition, but I do not know encryption.

Can you mount and unencrypt before running Boot-Repair?

https://help.ubuntu.com/community/En...home_directory
http://ubuntuforums.org/showthread.php?t=2028865
http://www.howtogeek.com/116297/how-...ory-on-ubuntu/

[YannBuntu]

Can you mount and unencrypt before running Boot-Repair?

+1

[kevin1]

Having followed the links and Googled some more, I have found nothing that compares directly to my configuration of an encrypted LVM physical volume containing root, home and swap logical volumes. (/boot is an ordinary unencrypted physical partition).

I don't know whether it would be possible to temporarily mount and decrypt the system before running boot-repair.

I could reinstall without encryption, but on balance I think that loss or theft of the laptop is more likely (and and of greater concern) than infection with malicious boot software, so I prefer to retain the encryption and live without Secure Boot.

Getting dual-boot of any sort to work was the most important thing, and boot-repair has achieved that.

Many thanks oldfred and YannBuntu,

Kevin

[oldfred]

So it worked?

Many do not do full disk encryption, but just encrypt /home. But I do not put anything real vital in my laptop and use it more as a desktop, so I do not use encryption.

[kevin1]

I'd say it 90% worked. I certainly have a usable dual-boot machine, just without the Secure Boot feature.

My laptop will travel with confidential data so full disk encryption which will maintain security during hibernation seems useful.

I guess that Grub will eventually be fixed to cope with Secure Boot on an encrypted LVM system.

Meanwhile, if anyone can provide step-by-step instructions to fix Secure Boot on such a system, please post.

Thanks,

Kevin

[oldfred]

The standard install of encrypted /home also encrypts swap. But with dual boot hibernation is not always the best thing to use. Copying a file into a hibernated system will lead to corruption.

Generally data should not be in anything other than /home, but you can configure data to be in other locations which then for you may be an issue.
I use data partitions and link them into /home. And my /home only really has the user settings. I do not think then a standard /home encryption would actually encrypt any of my data.