Скачать или смотреть VeraCrypt UEFI Boot in Graphic Mode with touch screen support

In this video, I will show how to configure VeraCrypt EFI bootloader for system encryption to boot in a graphic mode where a bitmap logo can be displayed and where an on-screen keyboard is displayed.
The password can be typed using physical keyboard but also using the on-screen keyboard.

The bmp file used in this video can be downloaded at https://veracrypt.fr/downloads/login.bmp.
F5 key can be used to show/hide the password and on-screen keyboard keys.

Basically, the steps are:
Modify EFI bootloader configuration file in order to do the following:
Set PasswordType entry to 1 instead of 0.
Verify that the PasswordPicture entry is present and that it's value is login.bmp
Add an entry for TouchSimulate with a value set to 1.
Check the option in VeraCrypt System Settings to not request PIM at boot: PIM is not implemented in graphic mode so if it is enabled, PIM request will be done in standard console mode. Use menu System - Settings and then check option "Do not request PIM in the pre-boot authentication screen"
Copy the bitmap file login.bmp to the root of the EFI system partition.
Start an administrative Windows command prompt as shown in the video and mount the EFI system partition in a drive letter (for example mountvole.exe B: /s) and perform standard copy operation to the root of EFI system partition (for example: copy C:\Data\login.bmp B:\login.bmp)

Any bitmap can be used provided that it is in 256 colors and that it doesn't include color space information. Windows Paint for example adds automatically color space information into bitmaps so you can't use Windows Paint to create such bitmap. I recommend to use Gimp for this purpose since it has the compatibility option of not including color space in exported bitmap images.

Once this is done, reboot. If you don't see VeraCrypt logo, then simply hit F1 key and it should be visible.





The steps in this video are:
1. modify EFI bootloader configuration by setting PasswordType to 1, adding "TouchSimulate" entry which is set to 1, and configuring the PIM to not be request at boot.
2. copy login.bmp file to EFI system partition: we do this in a elevated command prompt using the command "mountvol b: /s" to mount EFI system partition in drive B: and then copying login.bmp to B:.

After rebooting, VeraCrypt logo may not be visible and so we hit the key "F1" to display it.