File Share Encryption

Hi,

We have an in-house developed system that requires to check if the disk is encrypted (or at least instrumented by bootguard) before it proceeds with installation/upgrade. Is there a way to check this in the registry?

Appreciate any help.

Thanks!

Not through the registry, but you can use the "pgpwde.exe" command line tool to get this information.

E.g., run

pgpwde --status --disk 0

to get information on disk 0.  If you use the "--xml" option the output will be formatted in a way that is easier to parse with automated tools.

Regards,

Hi,

I was wondering why --status --disk 0 --xml doesn't give <status> for a 100% encrypted volume. If we had that it would be much easier to use our tool to find out encryption progress, for  reference here are all of the different "phases" of pgpwde --status --disk 0 -- xml

<instrumented>true</instrumented>
    <encryptionprocess>
      <running>false</running>
    </encryptionprocess>

<instrumented>true</instrumented>
    <encryptionprocess>
      <running>true</running>
      <status>decrypting</status>
    </encryptionprocess>

<instrumented>true</instrumented>
    <encryptionprocess>
      <running>true</running>
      <interrupted>u</interrupted>
      <status>encrypting</status>

    </encryptionprocess>

<instrumented>true</instrumented>
    <encryptionprocess>
      <running>true</running>
      <status>encrypting</status>
    </encryptionprocess>

Hi dfinkelstein,

Thanks for the help. We used the command pgpwde --status --disk 0 --xml and it seems to fill the requirement.

Cheers!