File Share Encryption

 View Only
  • 1.  Decrypting Non-Bootable Drive

    Posted Oct 20, 2015 09:13 AM

     

    My situation is I have a HP Notebook and the drive was encrypted on 10.3.1. The OS got upgraded to Windows 10 Pro, then one day it got left running updates and it restarted and could no longer boot. I've been trying to get the rest of the data off, so have removed the drive and connected it by USB to the same type of machine. Had the idea to open SED and then decrypt it, but only has the option to encrypt again, what should I do?

     



  • 2.  RE: Decrypting Non-Bootable Drive

    Posted Oct 26, 2015 07:51 PM

    Unfortunately, I may have some bad news for you.  Our product was not designed to be used during a major OS upgrade, and only the latest version (10.3.2 mp10) would be capable of running an upgrade from Windows 7 or 8 to Windows 10.  More info on that here:
    https://support.symantec.com/en_US/article.HOWTO119349.html

    Such an update, if it managed to begin on an encrypted drive, could lead to total data loss.  If you are able to retrieve any of the data while it is plugged in via USB, then get it all off of that drive immediately.

    If the drive is showing as not being encrypted, and you cannot access your data, you will need to try a command line recovery to see if the user list can be located and repaired:
    Open a command prompt as Administrator.
    Run the following commands:
    cd "C:\Program Files (x86)\PGP Corporation\PGP Desktop"
    pgpwde --enum
    pgpwde --recover --disk 1 --passphrase YourPassword

    Replace the "1" with whatever drive number the enum command showed as your slaved drive.  This will search every sector on the disk to find the backup Bootguard and attempt to repair it so the drive can be decrypted.