File Share Encryption

 View Only
  • 1.  How to recover encrypted HDD

    Posted Jan 15, 2015 01:15 PM

    Hello folks,

    Your help and expertise would be most appreciated... Here is my situation: My MBR and or Bootsector got corrupted in win7, so when I rebooted my laptop, I was directed to Windows RE. Frankly, having my HDD encrypted and what that meant simply slipped my mind and I attempted the usual recovery routs of windows - rebuild bootsector and MBR. That did not do too much good for the PGP MBR I am afraid.

    Now I have a new HDD in my machine, and the old one hooked in through the DVD tray and I am desperate to restore data since I have all my work docs on that disk. I have browsed through these forums and found some suggestions to similar situation here:

    http://www.symantec.com/connect/forums/pgp-wde-restore-mbr-or-get-data-encrypted-disk

    I attempted the command like this : pgpwde --recover --disk 1 -p 'passphrase'

    First I got an error message about FIPS 140-2 :  FIPS 140-2 integrity check failed (err=-11446), so I tried to enable this in my client software, but when I clicked PGP tray, I found that the 'options' menu is greyed out and unavailable.

    My software version is 10.3.0 and I am using an IBM license, I don't know if that makes a difference



  • 2.  RE: How to recover encrypted HDD

    Posted Jan 16, 2015 02:32 AM

    Update,

    I realized that I was running the program from the incorrect directory. I use 64 bit Win7 so the correct path is Program Files x86 and then the PGP folders. This way, I managed to run the restore command, which was successful, then the decryption command as well.

    PGP now says my drive is not encrypted, however the filesystem is still RAW when I bring the disk back online with the Computer Management tool of Windows.

    Now I shall attempt to recover data. If you have any suggestions, please let me know.
     



  • 3.  RE: How to recover encrypted HDD

    Posted Jan 19, 2015 09:26 AM

    Hello Ferenczm,

    If you have already tried to rebuild the MBR , PGP MBR may have gone for a toss. However when you connect this drive as slave on another machine and then go to the following location on Command Prompt Window

    For 32 bit

    c:\program files\pgp corporation\pgp desktop> pgpwde --enum

    For 64 bit

    c:\program files (x86)\pgp corporation\pgp desktop> pgpwde --enum

    What is the number for slaved disk.

    After that run the command

    pgpwde --status --disk number (it would tell the status if the drive is still encrypted).

     

    Please post the inputs of the commands.