See instructions here Full disk encryption, including /boot: Unlocking LUKS devices from GRUB

In addition to the above also create a key-file for the boot system so there should be key-files for both the encrypted devices (partitions)