Restoring Symantec System Recovery images of machines that have been protected by PGP whole disk encryption
| Article:TECH198084 | | | Created: 2012-10-09 | | | Updated: 2013-02-07 | | | Article URL http://www.symantec.com/docs/TECH198084 |
Problem
How to restore PGP-encrypted Symantec System Recovery images using the Recovery Disk
Error
Currently, if restoring PGP encrypted images using Symantec System Recovery with default restore settings, the machine will not boot correctly and may boot to a black screen with a blinking cursor, or the error 'No Operating System Found'. Or, the PGP password screen that does not accept the correct password.
Solution
DISCLAIMER: At this time, restoring volume(s) encrypted with PGP software is not currently supported by Symantec. The following steps are a 'work-around' in situations where a restore is imperative, and is not a guarantee of a successful restore.
To successfully restore PGP encrypted images using the Symantec Recovery Disk, use one of the following methods:
METHOD 1:
- Download pgp_fixmbr.zip from technote http://www.symantec.com/docs/TECH149102 and extract pgp_fixmbr.exe to the location where the recovery points (backup images) are stored.
- Boot machine with the BESR/SSR Recovery Disk (SRD).
- If applicable, map a network drive to the storage location of the recovery points.
- Click Analyze, then Open Command Shell Window. Navigate to where pgp_fixmbr.exe is located.
- Type pgp_fixmbr.exe and press enter.
- Type diskpart and press enter.
- When diskpart loads, type list disk.
- From the list, determine the target (destination) for the image file restore (typically disk 0).
- Type sel disk X, where x represents the target disk. (example sel disk 0).
***ENSURE THAT YOU SELECT THE CORRECT DISK. DO NOT PROCEED UNLESS 100% CERTAIN*** - Type Clean and press Enter. (This removes any and all partition or volume formatting from the disk selected in step 8.)
- Type create partition primary and press Enter. (This creates a primary partition on the current basic disk.)
- Type sel part 1 and press Enter. (This selects the specified partition and gives it focus.)
- Type format fs=ntfs quick and press Enter. (This formats the volume selected in step 12.)
- Type exit and press Enter to exit diskpart.
- Type exit and press Enter to exit the DOS shell.
- From the Recovery Disk Home page, click Recovery My Computer.
- From the drop-down menu, select Filename.
- Browse to the image file location and select the image file to restore.
- Click Next
- Uncheck Verify recovery point before recovery.
- Click Next
- Click Finish
- Click Yes
- The restore fail with Error EC950019: The current recovery data is invalid
- Click OK
- Click Back
- Click Edit
- Highlight the volume and click Delete Drive
- Highlight the new unallocated space
- In the options, select only Set drive active (for booting OS)
- Click OK
- De-select Use Restore Anyware to recover to different hardware if going to the same hardware. Otherwise, select this option.
- Click Next
- Click Finish
- Click OK, allow the recovery to finish, remove the Recovery disk and reboot the machine.
METHOD 2:
- Boot machine with the BESR/SSR Recovery Disk (SRD).
- If applicable, map a network drive to the storage location of the recovery points.
- From the Recovery Disk Home page, click Recover My Computer.
- From the drop-down menu, select Filename.
- Browse to the image file location and select the image file to restore.
- Click Open, then Next
- Uncheck Verify recovery point before recovery.
- Click Edit
- Highlight the volume you are restoring the image to, and click Delete Drive.
- Highlight the new unallocated space
- In the options, select only Set drive active (for booting OS)
- Click OK
- De-select Use Restore Anyware to recover to different hardware if going to the same hardware. Otherwise, select this option.
- Click Next
- Click Finish
- Click OK, allow the recovery to finish, remove the Recovery disk and reboot the machine.
- Enter the pass phrase on the PGP screen.
- When the error Missing Operating System appears, boot the machine from the recovery disk used in step 1.
- Click Analyze, then Open Command Shell Window. Navigate to the drive letter the recovery disk was booted from.
- Click CD MANAGER to get into the manager directory (example: D:\MANAGER).
- If system is Windows Vista or later, type BOOTSECT /NT60 c: /MBR (ensure that c:\ is the system volume. If not, adjust drive letter accordingly).
- If system is Windows XP, type BOOTSECT /NT52 c: /MBR (ensure that c:\ is the system volume. If not, adjust drive letter accordingly).
- Remove the recovery disk, reboot the system, type in the correct PGP pass phrase, and log into system.
METHOD 3:
- Boot machine with the BESR/SSR Recovery Disk (SRD).
- If applicable, map a network drive to the storage location of the recovery points.
- From the Recovery Disk Home page, click Recover My Computer.
- From the drop-down menu, select Filename.
- Browse to the image file location and select the image file to restore.
- Click Open, then Next
- Uncheck Verify recovery point before recovery.
- Click Edit
- Highlight the volume you are restoring the image to, and click Delete Drive.
- Highlight the new unallocated space
- In the options, select Set drive active (for booting OS) and restore original disk signature.
- Click OK
- De-select Use Restore Anyware to recover to different hardware if going to the same hardware. Otherwise, select this option.
- Click Next
- Click Finish
- Click OK, allow the recovery to finish, remove the Recovery disk and reboot the machine.
- Insert a Windows Vista 7/8/2008/2012 DVD (according to your operating system.
- Restart your computer
- Hit a key when asked if you want to boot from your DVD drive.
- Choose your language, click Next.
- Click Repair your computer
- Select the operating system you want to repair.
- On the system recovery screen, click Command Prompt
- Type bootrec.exe /fixmbr, press Enter.
- Type bootrec.exe /fixBoot, press Enter.
- Remove the Windows DVD, reboot the machine.
Symantec Corporation has acknowledged that the above-mentioned issue is present in the current version(s) of the product(s) mentioned to the right of this article. Symantec Corporation is committed to product quality and satisfied customers.
This issue is currently under investigation by Symantec Corporation. Pending the outcome of the investigation, this issue may be resolved by way of a patch or hotfix in current or future revisions of the software. However, this particular issue is not currently scheduled for any release. If you feel this issue has a direct business impact for you and your continued use of the product, please contact your Symantec Sales representative or the Symantec Sales group to discuss these concerns. For information on how to contact Symantec Sales, please see http://www.symantec.com Please be sure to refer back to this document periodically as any changes to the status of the issue will be reflected here.
|
|
Article URL http://www.symantec.com/docs/TECH198084
Terms of use for this information are found in Legal Notices









Thank you.