VeraCrypt - Free Open source disk encryption with strong security for the Paranoid

Documentation VeraCrypt Volume System Favorite Volumes

# System Favorite Volumes

System favorites are useful, for example, in the following cases:

- You have volumes that need to be mounted before system and application services start and before users start logging on.
- There are network-shared folders located on VeraCrypt volumes. If you configure these volumes as system favorites, you will ensure that the network shares will be automatically restored by the operating system each time it is restarted.
- You need each such volume to be mounted as the same drive letter each time the operating system starts.

Note that, unlike the regular (non-system) favorites, system favorite volumes use the pre-boot authentication password and, therefore, require your system partition/drive to be encrypted (also note it is not required to enable caching of the pre-boot authentication password). Moreover, since the pre-boot password is typed using US keyboard layout (BIOS requirement), the password of the system favorite volume must be entered during its creation process using the US keyboard layout by typing the same keyboard keys you type when you enter the pre-boot authentication password. If the password of the system favorite volume is not identical to the pre-boot authentication password under the US keyboard layout, then it will fail to mount.

When creating a volume that you want to make a system favorite later, you must explicitly set the keyboard layout associated with VeraCrypt to US layout and you have to type the same keyboard keys you type when you enter the pre-boot authentication password.
System favorite volumes can be configured to be available within VeraCrypt only to users with administrator privileges (select Settings > ‘System Favorite Volumes’ > ‘Allow only administrators to view and unmount system favorite volumes in VeraCrypt’). This option should be enabled on servers to ensure that system favorite volumes cannot be unmounted by users without administrator privileges. On non-server systems, this option can be used to prevent normal VeraCrypt volume actions (such as ‘Unmount All’, auto-unmount, etc.) from affecting system favorite volumes. In addition, when VeraCrypt is run without administrator privileges (the default on Windows Vista and later), system favorite volumes will not be displayed in the drive letter list in the main VeraCrypt application window.

### To configure a VeraCrypt volume as a system favorite volume, follow these steps:

1. Mount the volume (to the drive letter to which you want it to be mounted every time).
2. Right-click the mounted volume in the drive list in the main VeraCrypt window and select ‘Add to System Favorites’.
3. The System Favorites Organizer window should appear now. In this window, enable the option ‘Mount system favorite volumes when Windows starts’ and click OK.

The order in which system favorite volumes are displayed in the System Favorites Organizer window (Favorites > ‘Organize System Favorite Volumes’) is the order in which the volumes are mounted. You can use the Move Up and Move Down buttons to change the order of the volumes.

A special label can be assigned to each system favorite volume. This label is not the same as the filesystem label and it is shown within the VeraCrypt user interface instead of the volume path. To assign such a label, follow these steps:

1. Select Favorites > ‘Organize System Favorite Volumes’.
2. The System Favorites Organizer window should appear now. In this window, select the volume whose label you want to edit.
3. Enter the label in the ‘Label of selected favorite volume’ input field and click OK.

Note that the System Favorites Organizer window (Favorites > ‘Organize System Favorite Volumes’) allows you to set various options for each system favorite volume. For example, any of them can be mounted as read-only or as removable medium.
Warning: When the drive letter assigned to a system favorite volume (saved in the configuration file) is not free, the volume is not mounted and no error message is displayed.
Note that Windows needs to use some files (e.g. paging files, Active Directory files, VHD/VHDX files configured for automatic attachment at startup, Dev Drive backing VHDX files, native-boot VHD/VHDX files, etc.) before system favorite volumes are mounted. Therefore, such files cannot be stored on system favorite volumes. Note, however, that files supported by VeraCrypt system encryption can be stored on any partition that is within the key scope of system encryption (e.g. on the system partition or on any partition of a system drive that is entirely encrypted by VeraCrypt). Native-boot VHD/VHDX files remain subject to the limitation that VeraCrypt does not support pre-boot authentication for operating systems installed within VHD/VHDX files. For VHD/VHDX files that are not required for boot or early Windows startup, a possible workaround is to disable Windows automatic attachment and attach them only after the corresponding system favorite volume has been mounted, for example by using a delayed/retrying startup task or a service that depends on the VeraCryptSystemFavorites service and runs `Mount-DiskImage` or `diskpart attach vdisk`. This workaround is not suitable for paging files, Active Directory files, native-boot VHD/VHDX files, or any other file that Windows must access before services can run.
To remove a volume from the list of system favorite volumes, select Favorites > Organize System Favorite Volumes, select the volume, click Remove, and click OK.