Method for securely booting up a computer system, and assembly comprising a computer system and an external storage medium connected to the computer system

摘要

The invention relates to a method for securely booting up a computer system having an encrypted file system. The method comprises the following steps: initiating a startup process of the computer system by accessing program data necessary for the startup process; loading and executing the program data; linking an external storage medium connected to the computer system, wherein a file system key for decrypting file system data of the encrypted file system is stored on the external storage medium, the file system key on the external storage medium being encrypted; loading the encrypted file system key from the external storage medium into the computer system; decrypting the encrypted file system key by means of a key stored in the computer system; setting the decrypted file system key in a cryptography module established by the startup process; and decrypting and loading file system data of the encrypted file system by the cryptography module by means of the set file system key, as a result of which the computer system is completely booted up.