Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

PGP Registry Entry for Encrypted Disks

Created: 23 Oct 2012 • Updated: 06 Nov 2012 | 3 comments
This issue has been solved. See solution.

Hi,

We have an in-house developed system that requires to check if the disk is encrypted (or at least instrumented by bootguard) before it proceeds with installation/upgrade. Is there a way to check this in the registry?

Appreciate any help.

Thanks!

Comments 3 CommentsJump to latest comment

dfinkelstein's picture

Not through the registry, but you can use the "pgpwde.exe" command line tool to get this information.

E.g., run

pgpwde --status --disk 0

to get information on disk 0.  If you use the "--xml" option the output will be formatted in a way that is easier to parse with automated tools.

Regards,

--------

David Finkelstein

Symantec R&D

SOLUTION
LT_70's picture

Hi dfinkelstein,

Thanks for the help. We used the command pgpwde --status --disk 0 --xml and it seems to fill the requirement.

Cheers!

Sarah Mays's picture

Hi,

I was wondering why --status --disk 0 --xml doesn't give <status> for a 100% encrypted volume. If we had that it would be much easier to use our tool to find out encryption progress, for  reference here are all of the different "phases" of pgpwde --status --disk 0 -- xml

100% Encrypted
<instrumented>true</instrumented>
    <encryptionprocess>
      <running>false</running>
    </encryptionprocess>
 
Decrypting
<instrumented>true</instrumented>
    <encryptionprocess>
      <running>true</running>
      <status>decrypting</status>
    </encryptionprocess>
 
 
Encryption Paused
<instrumented>true</instrumented>
    <encryptionprocess>
      <running>true</running>
      <interrupted>u</interrupted>
      <status>encrypting</status>

    </encryptionprocess>
 
 
Encryption in progress
<instrumented>true</instrumented>
    <encryptionprocess>
      <running>true</running>
      <status>encrypting</status>
    </encryptionprocess>