Dual Booting Ubuntu With Windows 10 Pro With BitLocker Encryption

I have written about dual booting Windows and Ubuntu in the past. The process has improved so much in the last few years. Ubuntu and other Linux play very well with secure boot and UEFI now.

So, why I am I writing about installing Ubuntu with Windows 10 once again? Because these days Windows 10 Pro version comes with BitLocker encryption and hence when you try to dual boot like normal, it either refuses or creates issue.

I noticed it with my new Dell XPS 13. I bought the last Dell XPS in France and it was preinstalled with Ubuntu. Unfortunately, Dell India had no option other than buying the Windows 10 version. In a way, that’s good because it helped me to write this tutorial.

To be honest, dual booting with BitLocker encrypted disk is also not complicated. It just involves the extra step of disabling encryption before starting the dual boot and re-enable it after installing Linux.

Don’t worry. I won’t leave you just like that with my words. I’ll show you each and every step with appropriate details.

Installing Ubuntu with BitLocker Encrypted Windows 10

Please keep in mind that I have used Ubuntu here, but the steps should be applicable to Linux Mint and other Ubuntu-based distributions as well.

Prerequisite

Here are the things you need:

• A Windows 10 system with BitLocker encryption.
• A USB key (also known as pen drive or USB drive) of at least 4 GB in size and no data on it.
• Microsoft account for saving the recovery key of BitLocker encryption (external USB can be used as well but MS account will be more convenient).
• Internet connection.
• Optional: External USB disk for making back up of your data.
• Optional: Windows recovery disk.
• Some time and patience (mandatory).

If you prefer videos, you may watch this video I made to show the steps in action:

Step 1: Make a backup of your important data on an external disk

This is optional yet recommended. You should make a backup of your important files on an external disk because you are going to deal with disk partitions.

If you are not sure of anything, I suggest look for documents, music, movies and other important stuff you must not lose and copy them on an external USB disk. You can use an external HDD (slower but cheaper) or SSD (faster but expensive).

[lasso box=”B08GTXVG9P” link_id=”20228″ ref=”sandisk-500gb-extreme-portable-ssd-up-to-1050mb-s-usb-c-usb-3-2-gen-2-external-solid-state-drive-sdssde61-500g-g25″ id=”101803″]

[lasso box=”B08JKFY8FH” link_id=”20229″ ref=”toshiba-canvio-advance-1tb-portable-external-hard-drive-usb-3-0-black-hdtca10xk3aa” id=”101806″]

You may also use a pen drive for copying files and storing it on some other computer (if you have more than one system).

Step 2: Verify that you have BitLocker encrypted disk

First thing first, check if you actually have BitLocker encryption enabled. How do you do that? It’s simple. Go to file explorer and check if your main drive has a lock displayed.

Alternatively, just search for BitLocker in Windows menu and see if you have BitLocker settings.

Step 3: Back up recovery key and disable BitLocker encryption

Now that you know that you have BitLocker encryption enabled on your system, the next step is to disable it.

Before you do that, you must back up your recovery key. It is a 40 digit key to reset BitLocker encryption. Why? Because you are going to change the boot settings and BitLocker won’t like that. It will ask you to enter the recovery key to ensure that your encrypted disk is in safe hands.

You may back up the key on an external USB disk or to your Microsoft account. I saved it to my Microsoft account because it is easier to keep track of the recovery keys at one central place. Of course, you must ensure that you have access to a Microsoft account.

Verify that your recovery key is properly saved by going to this link and logging into your Microsoft account.

Once you have saved the recovery key, disable BitLocker encryption. The decryption process may take some time depending on how much disk space you had already utilized.

While you wait for the decryption to complete, you should go on and download Ubuntu ISO. Once BitLocker is disabled, you would notice that the lock has disappeared from the drive icon.

Step 4: Download Ubuntu ISO

While the disk is being decrypted, you should utilize the time in downloading the ISO image of Ubuntu desktop version. It’s a single file of around 2 GB in size and you may download it directly or use torrent if you have a slow and inconsistent internet.

Step 5: Create a live USB of Ubuntu

Once you have got the ISO, you should get a tool for making the bootable live USB of Ubuntu.

You may use Etcher on Linux, Windows and macOS. However, the way Etcher creates a bootable disk leaves the USB in a weird state and you’ll have a difficult time formatting the disk after the dual boot is over.

For this reason, you are using Windows, I recommend using a free tool like Rufus. Download Rufus from its website.

Plug in the USB key. Since the USB will be formatted, make sure it doesn’t consist of any important data.

Rufus automatically identifies the plugged in USB keys but it will still be a good idea to make sure that it is pointing to the correct USB. Then you should browse to the location of the downloaded ISO image.

You must ensure that it uses GPT partitioning scheme and UEFI target system.

Hit the start button to initiate the process of live USB creation. If asked, choose ‘Write in ISO Image mode’:

It will take a few minutes to complete the process. Once you have the live USB ready, the next step is the actual installation of Ubuntu Linux.

Step 6: Boot from live USB

With the live USB of Ubuntu plugged in to your Windows system, it’s time to boot into this live system. There are two ways to do that:

1. Restart the system and at the boot time, press F2/F10 or F12 to access boot settings. From here, move ‘booting from removable media’ up the order to boot from USB.
2. From within Windows, access UEFI settings and choose to boot from removable media. This will reboot the system and you’ll be booting from the USB.

I prefer the second method because you may have difficulties in with boot settings from the first method.

In the Windows menu, search for UEFI and click on ‘Change advanced startup options’:

Under the Advanced startup option, click on Restart now button.

On the next screen, click on ‘Use a device’:

Recognize the USB disk with its name and size:

Now it will power off your system and reboot into the disk you chose which should be the live USB disk.

Step 7: Installing Ubuntu with Windows

When you boot from the live USB, you should see the GRUB screen that presents you the option to try Ubuntu in live USB or install it right away. You may go with either option.

If you chose to try live USB, you should see the installation option on the desktop screen.

Clicking it will start the installation procedure that starts with choosing language and keyboard layout.

On the next screen, it asks for the kind of installation. Go with Normal installation. No need to download updates or install third-party software just yet. You may do it after installation completes. In my experience, it increases the installation duration and may create issues at times. I prefer to avoid it.

It takes a little time and then you see the Installation type screen. This is one of the most important parts of the dual booting procedure.

If you see the ‘Install Ubuntu alongside Windows Boot Manager’, it’s good news. You can proceed with the rest of the installation which means dragging the divider to allocate disk partitioning for Ubuntu.

But if you are one of the unlucky ones who don’t see this option, you’ll have to quit the installation and do some additional efforts that I have explained under the expandable section.

Things are pretty straightforward from here. You’ll be asked to select a timezone.

You’ll be asked to enter a username, hostname (computer’s name) and a password. Pretty obvious, right?

Now it’s just the matter of waiting. It should take 8-10 minutes to complete the installation.

Once the installation finishes, restart the system.

You’ll be asked to remove the USB disk. You can remove the disk at this stage without worrying. The system reboots after this.

If everything went smooth, you should see the grub screen once the system powers on. Here, you can choose Ubuntu to boot into Ubuntu and Windows boot manager to boot into Windows. Pretty cool, right?

If you don’t see the option to install Ubuntu alongside Windows, quit the installation, turn off the system and boot into Windows. Here, make some free space on your disk by shrinking your disk size.

When you boot into Ubuntu, you should see this welcome screen.

You are at penultimate stage. The only remaining part is to re-enable BitLocker for your Windows partitioning, if you want encryption again. You may leave it unencrypted as well. It’s really up to you.

Step 8: Enable Bitlocker after installing Ubuntu successfully

Restart your system and select Windows boot manager at the grub screen to boot into Windows. In Windows, go to BitLocker settings and click on ‘Turn on BitLocker’ option.

Here’s an important thing. Each time you disable and re-enable BitLocker the recovery key changes. This is why you’ll be asked to back up your recovery key once again. Save it to your account once again.

On the next step, it asks if you want to encrypt the entire disk or only the used space. You can choose either option depending on your need.

Go with the new encryption mode:

Start the encryption. Please keep in mind that encrypting the disk will take some time (based on your used disk space) and consumes considerable processing power. Have patience.

Things look all set. Before ending the tutorial, I’ll also show you what to do when Windows asks for the BitLocker recovery key.

Bonus Tip: Using BitLocker recovery (when asked for it)

When you re-enable BitLocker, it can sense that the boot settings has been changed. For that reason, it will ask for the recovery key when you try to boot into Windows after re-enabling BitLocker.

It mentions the recovery key ID. The first eight characters are important to identify the correct recovery key.

On a mobile device or on another computer or boot into Ubuntu and then access your Microsoft account and look at the saved recovery keys.

You may have more than one recovery keys on the account of saving the key multiple times. This is where the recovery key ID comes in handy. Take a note of the 40 digit recovery key associated to that recovery key ID.

Enter this recovery key to unlock BitLocker and access Windows.

Don’t worry. It won’t ask you for the recovery key every time you boot into Windows. It is just when you make a change in the boot settings.

You’ll also need the recovery key if you try to mount the encrypted Windows partition in Linux.

Were you able to successfully dual boot Windows 10 with Ubuntu and BitLocker?

I know it was long read with too many steps and images. I actually tried to give you all the necessary details so that you don’t feel uncomfortable or lost at any stage. I am also working on a video for these steps so that you can see things in action.

If you tried the tutorial, did it work for you? Do you still have problems or questions? Please feel free to ask in the comment section.