Just use Bitlocker . Despite being proprietary, it has withstood court challenges, indicating no backdoor and much easier and reliable than having to deal with utfi, firmware, compatibility, and secure boot settings and other issues that may arise with VeraCrypt when trying to encrypt the entire drive. Microsoft makes it idiot proof to encrypt the drive. This is one of the few instances in which the closed source option is better than open source.