Fix the VeraCrypt "Automatic Repair" issue on Windows

[harlan4096]

VeraCrypt is a popular open source encryption tool that may be used to encrypt files, create encrypted containers, encrypt entire hard drives and partitions, and even the system partition. Encryption of the system partition adds a bootloader to the system which loads VeraCrypt on system start. You enter the password, and if configured the PIM, and the system boots if the authentication is correct.

Windows may interfere with the setup as it may add a bootloader of its own to the system which is then used by the device instead of the VeraCrypt bootloader; this is a problem if the system partition is encrypted. Windows' bootloader cannot find any files and loads repair options as a consequence.

Repairs are unsuccessful as no data can be read, and you end up with the automatic repair message "Automatic Repair couldn't repair your PC". Restarting does not address the issue as the system is caught in the bootloop. The same process happens over and over again.

Advice: to avoid the automatic changing of boot information on Windows devices, set a password in the UEFI interface. Windows cannot manipulate the data anymore once you have set a password so that the issue does not happen again.

You may have options to bypass the issue temporarily. If the motherboard includes options to select the bootloader, you may use it to pick the VeraCrypt bootloader; this is not the case for all systems, however. You may also select Advanced Options > Use a device > Veracrypt Bootloader in the Automatic Repair interface to start the system again using the correct bootloader. Type your password and PIM, and the system should boot normally.

Repairing the Automatic Repair issue

You may be able to repair the issue. Basically, what you need to do is "tell" the system to use the VeraCrypt Bootloader on system start. A program like Bootice may assist you. It is a free program that displays UEFI boot entries and gives you some options when it comes to these.

Download the program from this site and extract it after you have done so. Run the application, allow the elevation, and then go to UEFI > Edit boot entries.

All you need to do is move the VeraCrypt Bootloader to the top. Select the bootloader entry and use the "up" button to move it there. Leave everything as is and select close. Exit the application and restart Windows.

If everything worked, you should see the VeraCrypt password prompt on boot. The bootmanager is used from that moment on again. Note that you may still want to set a password to avoid running in the same issue again in the future.
...

Continue Reading