Operating system encryption system and method

1. A computing system, comprising:

a non-volatile data storage drive;

a pre-boot operating system stored in an encrypted form according to a first key on a first partition of the non-volatile data storage drive;

a main operating system stored in an encrypted form according to a second key on a second partition of the non-volatile data storage drive;

a system built in operating system (BIOS) chip, the system BIOS chip is configured to initiate a first authentication process, obtain the first key after successful completion of the first authentication process, load and decrypt the pre-boot operating system into dynamic memory, and cause the pre-boot operating system to run from dynamic memory;

wherein the pre-boot operating system is configured to initiate a second authentication process, obtain the second key after a successful completion of the second authentication process, load and decrypt the main operating system into dynamic memory, and cause the main operating system to run from dynamic memory;

wherein the first authentication process comprises providing first identification information to a remote authentication server, and wherein the first key is obtained from the remote authentication server; and

wherein the second authentication process comprises providing second identification information to a remote authentication server, and wherein the second key is obtained from the remote authentication server.

2. The computing system of claim 1 , wherein the first identification information is a certificate.

3. A method of booting a computing system, comprising:

initiating a first authentication process at a system built in operating system (BIOS) chip by providing first identification information to a remote authentication server;

obtaining a first key from the remote authentication server after successful completion of the first authentication process;

loading and decrypting a pre-boot operating system encrypted on a first partition of a non-volatile data storage device into dynamic memory;

causing the pre-boot operating system to run from dynamic memory;

initiating a second authentication process by the pre-boot operating system by providing second identification information to the remote authentication server;

obtaining a second key from the remote authentication server after a successful completion of the second authentication process;

loading and decrypting a main operating system encrypted on a second partition of the non-volatile data storage device into dynamic memory; and

causing the main operating system to run from dynamic memory.

4. The method of claim 3 , wherein the first identification information is a certificate.

5. A method of configuring a computing system, comprising:

installing and encrypting a pre-boot operating system according to a first key on a first partition of a non-volatile data storage device;

installing and encrypting a main operating system according to a second key on a second partition of the non-volatile data storage device;

storing the first and second keys at a remote authentication server; and

configuring a system built-in operating system (BIOS) chip with first identification information and to perform a first authentication process upon system start-up;

configuring a pre-boot operating system chip with second identification information and to perform a second authentication process upon system start-up;

wherein the first identification information comprises a certificate, and wherein the first authentication process comprises:

forwarding the certificate to the remote authentication server; and

obtaining the first key in response to successful authentication of the certificate; and

wherein the second authentication process comprises:

forwarding the second identification information to the remote authentication server; and

obtaining the second key in response to successful authentication of the second identification information.