File Share Encryption

Hi, 

I'm an admin for a large set of MacBook Airs that are encrypted. Normally, for MB Pros, I just remove the hard drive and decrypt using my own machine, but that isn't an option for MB Airs. Is there a way for me to log into the MacBook Air PGP program as the admin and start the decryption? Or is the only way decrypting using the boot disk?

Thanks!

Also, where is the PGP forums option in the Community list? I get redirected here from forum.pgp.com and it seems like I'm in the wrong place for this.

I've moved your post to the proper forum - good luck!

Cheryl

I can't help with the first question, but the PGP forums can be found by scrolling down to the five PGP options here.

you can decrypt with the PGP desktop application. (or backup, erase and restore from time machine)

Since there is no firewire port and no cd drive you pretty much have to do the decryption on the Macbook Air. You could use ssh or some form of remote desktop. When logged in via ssh you can use the pgpwde command line to access the PGP functionality.

Otherwise, if you have made USB bootable OSX install sticks you can re-install the OS faster than you can decrypt the system. This assumes of course that you have the data backed up somewhere.

Be careful...If you do decide to go the route of wiping your drive and reinstalling the OS. MAKE SURE that you remove EVERYTHING off the disk. Otherwise you will end up with a system that won't boot if you don't wipe out the partitions on the entire disk.

curious, does PGP/Symantec have a KB article i can point savvy users to about how they are supposed to re-format a PGP encrypted hard drive? or any information as to why it's impossible to erase a WDE encrypted flash drive when PGP is installed? 

As fun as it is for me to already know this information, these sort of GOTCHAs really should be documented better by PGP/Symantec.

The drive needs to be repartitioned, not just formatted.  In disk utility, click the disk (not the volume), then partition, then change 'current scheme' to 1-partition (or more), and partition the disk.  Make sure you click options and choose 'GUID', then set the format to Mac OSX Extended (Journaled).  I avoid case-sensitive volumes because they tend to break applications.

Of course, that has to be done from a non-PGP installed OS instance.  PGP removed that capability a long time ago.  I have had luck mounting drives from a windows virtual machine, then following instructions (google for them) to 'Remove GPT Protected Partition' using the command line.  I never have found a way around it on OSX without booting my install DVD.

Depending on your threat model, it might be a moot point on Wednesday (if rumors are right).