I am used to building systems with LUKS on LVM and encrypting the boot parition containing GRUB2. Since moving to newer machines I am using UEFI.

Is it necessary to encrypt the EFI partition in the same fashion? Or are there built-in security features by design, of which I am currently unaware?

closed as unclear what you're asking by Rui F Ribeiro, Thomas, RalfFriedl, GAD3R, Mr Shunz Jan 13 at 14:12

Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • It never was mandatory. What do you really want to ask? – Rui F Ribeiro Jan 13 at 8:36
  • Is it possible to encrypt the EFI partition and is it even necessary? Or is there security-by-design of which I am currently unaware? – BitShift Jan 14 at 7:28