Using Windows and bitlocker
Mark Foley <[email protected]> Thu, 19 Jun 2025 11:57:34 -0400
| Newsgroups | dev.linux.lists.cryptsetup |
|---|---|
| Organization | Novatec Software Engineering, LLC |
| Message-ID | <[email protected]> |
I have been asked to encrypt files on the office shared drive. After researching I was pointed to LUKS and cryptsetup. The shared drive is a Samba shared directory hosted on Linux. Windows users map this partition on their Windows 11 workstations. I've downloaded and installed cryptsetup 2.7.5. Linux forum feedback has advised me that Windows uses BitLocker for security/encryption and that cryptsetup supports this. The README.md of the downloaded cryptsetup tarball says at the very beginning: These formats are supported: * **plain** volumes, * **LUKS** volumes, * **loop-AES**, * **TrueCrypt** (including **VeraCrypt** extension), --> **BitLocker**, and * **FileVault2**. A Google search on this topic gives: "BitLocker is a disk encryption feature in Windows, and while you can access BitLocker volumes in Linux using cryptsetup with Bitlocker support enabled, you cannot create a LUKS volume that is directly compatible with BitLocker. Instead, you would need to choose one encryption method for the partition (either BitLocker or LUKS) and then utilize tools like cryptsetup with Bitlocker support or dislocker to access the encrypted drive from the other operating system." I'll confess I don't really understand the above (cannot create a LUKS volume that is directly compatible with BitLocker? The "Instead ..." bit does not enlighten me.) I've read the FAQ https://gitlab.com/cryptsetup/cryptsetup/-/wikis/FrequentlyAskedQuestions, and the manpage, but there is no mention of using BitLocker and I've found no examples on how to do this. I have a couple of empty partitions ready to test with, and I believe I can set up an encrypted partition using 'cryptsetup luksFormat' and 'cryptsetup luksOpen' per numerous examples I've seen. Questions: Is cryptsetup the right choice for Windows/Samba access of entrypted drives/ partitions on Linux? If so, do I need to use BitLocker from Windows? If so, How do I set that up with cryptsetup? Thanks --Mark