title: Encrypted Bootable Windows PE
body: <p>What I need in a nutshell:</p>
  
  <ol>
  <li>Boot Windows PE from a USB drive </li>
  <li>Encrypt a custom script which has a password in it which is within the WIN PE ISO</li>
  <li>Ideally the boot will be password protected (not necessary)</li>
  <li>The USB drive needs to have available storage for portable Windows programs</li>
  <li>The whole boot process needs to be straight forward and reproduction onto multiple drives needs to be simple</li>
  <li>The solution needs to run on a standard (cheap) USB drive, no hardware encryption.</li>
  </ol>
  
  <p>The reason for this is that if the USB drive is stolen, the password must not be accessible.</p>
  
  <p>What I have tried so far:</p>
  
  <ul>
  <li>I can get 1, 4, 5 &amp; 6 using YUMI (http://www.pendrivelinux.com/yumi-multiboot-usb-creator/)</li>
  <li>I have looked into Truecrypt's System Encryption option, but can't see a way of doing this with Windows PE</li>
  </ul>
  
  <p>YUMI creates a bootleader on the USB drive and them boots the Windows PE ISO, I was thinking that there might be some way to encrypt the whole ISO and then automatically decrypt it before YUMI boots it. Although this seems like too much effort.
  I was also thinking that maybe the script could be zipped (using 7 zip) within the ISO and then have a a script run on the Windows PE boot that will ask for a password to extract it so it can then be run. </p>
  
  <p>Any help/ideas will be appreciated.</p>