How to restore a Backup Exec System Recovery (BESR) 2010 or Symantec System Recovery (SSR) 2011/2013 PGP Encrypted image.

Article:TECH55306

Created: 2007-01-05

Updated: 2013-05-02

Article URL http://www.symantec.com/docs/TECH55306

Article Type
Technical Solution

Product(s)

Show all

Languages

Show all

Problem

Does Backup Exec System Recovery (BESR) 2010 or Symantec System Recovery (SSR) 2011/2013 work with PGP Encryption software?

Solution

You can back up a PGP-encrypted volume without any issue. However, while recovering a PGP-encrypted system volume a manual workaround (mentioned below) is required.

Consider the following points while backing up or restoring PGP-encrypted volumes:

If multiple volumes are encrypted and you are performing a hot backup (backup while OHS is running), you must back up all the encrypted volumes. In case of system volume restore, you must restore all the volumes.
If you restore a system volume, you must also restore all the data volumes. However, the data volumes can be restored individually.
During hot backups of encrypted volumes, the encryption is not retained. Hence, after you restore the volumes using the method below, you must encrypt them again.
If you have cold backups of PGP-encrypted volumes, you must restore the backups with the same partition layout (start offset, size, and sequence) and on the same disk.

Workaround

To restore a computer with PGP-encryption, after you boot your computer using the Symantec Recovery Disk CD/DVD and restore your primary drive, you must rewrite the Master Boot Record (MBR).

You can do so by performing the following steps:

Boot into the Symantec recovery environment using the Symantec Recovery Disk (SRD).
Note: If using a USB SRD, copy the MANAGER folder from a SRD CD\DVD to the root of USB drive before booting to the USB SRD.
Connect the backup media to your computer.
Run the Recover My Computer wizard and restore your computer. Do not allow the computer to reboot when finished.
When the restore is complete, click the Analyze tab.
Click on Command Prompt.
Navigate to the Symantec Recovery Disk drive letter.
Rewrite the Master Boot Record using the following command:

For Windows XP/2003:
D:\MANAGER\Bootsect.exe /nt52 C: /mbr

For Windows Vista or later:
D:\MANAGER\Bootsect.exe /nt60 C: /mbr

Example, with successful return message:
Reboot the system.
Once back into Windows, it will be necessary to re-encrypt the restored volume(s).