Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

PGP wont resume whole disk encryption/Unknown bus

Created: 08 Oct 2012 | 28 comments

I have seen this discussed many times but running: 

pgpwde --stop --disk (disk number here) -p (passphrase here)

pgpwde --resume --disk (disk number here) -p (passphrase here)

doesnt seem to do anyhting for me.  When I go back to the PGP screen it shows me %0 encrypted and also shows the drive that I was attempting to encrypt as unkown bus.

When I restart the machien I still get the PGP passphrase screen.

Anyone have any ideas?  

Comments 28 CommentsJump to latest comment

Alex_CST's picture

What version are you running?  What OS?  What type are the disks? Size?

Sometimes the GUI can display no progress when progress is still being made to encrypt/decrypt.  The only sure-fire way to determine if any progress is being made is by the highwatermark number when you run the following command:

pgpwde --status --disk #

Disk disk0 is instrumented by bootguard.
Current key is valid.
Whole disk encrypted
Total sectors: # highwatermark: #
Disk status completed
 
Wait a few minutes then run the command again, compare the highwatermark numbers.  That essentially gives you a realtime view of how many sectors are currently encrypted, so if it changes then progress is being made.
 
Please mark posts as solutions if they solve your problem!

http://www.cstl.com

slowz3r's picture

 its 10.2 on Windows 7x64

When I run that command it says that the encryption process was interupted by user.

And the total sectors does not change.

And im pretty certain its giving my machine BSOD

Alex_CST's picture

So inside PGP Desktop the encrypt/decrypt button is greyed out?

How far into decryption is it?  And how big is the disk?

Please mark posts as solutions if they solve your problem!

http://www.cstl.com

slowz3r's picture

Yea, the button to resume is greyed out.  Not sure why it shows as resume seeing as when I initially started it I never even paused it. Also for some reason its showing my drive as being on an Unknown bus.

It shows %0 on a 600 gig drive.

Alex_CST's picture

Can you paste in the pgpwde --status --disk # results? 

Please mark posts as solutions if they solve your problem!

http://www.cstl.com

slowz3r's picture

Disk 0 instrumented by bootguard.

       Encryption process interrupted by user request.

       Current key is valid.

Whole disk encrypted

       Total sectors:1172119552

Request sent to Disk status was successful

PGP_Ben's picture

How about  the output from pgpwde --enum from a command prompt as well as a screenshot of what disk management looks like for the drive?

Where it says unknown bus - are you using an SCSI controller, SATA, or IDE? ATA OR AHCI mode? Do you have a RAID setup on the drive(s)?

If/when you consider your issue resolved, please click Mark As Solution on the most helpful response.

slowz3r's picture

Here is the output from pgpwde --enum and here is the screenshot of disk manager, nothing out of the ordinary. 

Its SATA in AHCI mode and it is a single drive.

PGP_Ben's picture

If you haven't already done so, I would check our WDE best practices KB as well. This involves doing things like a disk defrag, check disk, etc to look at possible causes for the encryption pausing after instrumenting the drive.

I would look at:

TECH149543

and

TECH193751

as well as

TECH173958

Lastly - have you run a memory diagnostic of the RAM in the machine also, since you are getting BSOD and some unexpected behavior on the computer?

If/when you consider your issue resolved, please click Mark As Solution on the most helpful response.

Alex_CST's picture

What were the stop codes on the BSOD?

Please mark posts as solutions if they solve your problem!

http://www.cstl.com

slowz3r's picture

How about this, instead of trying to get it to work how about a way to uninstall.

Alex_CST's picture

Unfortunately you'll be unable to uninstall until the disk is decrypted, that can sometimes kick the decryption back into action however

Please mark posts as solutions if they solve your problem!

http://www.cstl.com

slowz3r's picture

Yea and seeing as decryption wont resume I dont know how --decrypt will work.

PGP_Ben's picture

IF you want to uninstall run pgpwde --decrypt --disk # (instead of pound put in the disk number if it's the primary boot drive that is drive 0)

then you should be able to uninstall from there

If/when you consider your issue resolved, please click Mark As Solution on the most helpful response.

slowz3r's picture

if pgpwde --resume wasnt working for me how is --decrypt going to work

PGP_Ben's picture

The commands are entirely seperate actually. a pgpwde --stop --disk 0 then pgpwde --decrypt *SHOULD* allow you to deinstrument the disk.

if not, I would try pgpwde --uninstrument --disk 0

Did the command give you an error?

If/when you consider your issue resolved, please click Mark As Solution on the most helpful response.

slowz3r's picture

Ok that worked, thanks! I uninstalled and reinstalled but it still shows the drive as an unknown bus.

PGP_Ben's picture

another option would be to use the recovery CD and attempt to decrypt there...

If/when you consider your issue resolved, please click Mark As Solution on the most helpful response.

Alex_CST's picture

A further option is to put the drive into another machine with PGP Desktop installed and attempt to decrypt there also.  The recovery CD is the much more surefire way of decryption, but it's 16-bit and will take a long time depending on how much of your disk is currently encrypted.

Please mark posts as solutions if they solve your problem!

http://www.cstl.com

slowz3r's picture

I got it decrypted and uninstalled/reinstalled but it still shows the drive as an unknown bus.  Are there any driver incompatabilities with WDE that may cause ths?

Alex_CST's picture

What is the system?  What is the type of HDD?  AFAIK the only problem with WDE and HDDs are ones with 4kn on.

Please mark posts as solutions if they solve your problem!

http://www.cstl.com

slowz3r's picture

Its on a workstation.  Asus P8z68 with a Western Digital 10k Raptor.

PGP_Ben's picture

Here is a repost of my prior inquiry:

Where it says unknown bus - are you using an SCSI controller, SATA, or IDE? ATA OR AHCI mode? Do you have a RAID setup on the drive(s)?

I did happen to notice this on ASUS support site. I wonder if it could be a problem with this newer UEFI BIOS and we are not compatible with it yet?

Exclusive to ASUS motherboards, its UEFI (Unified Extensible Firmware Interface) is the first ever mouse-controlled graphical BIOS interface designed with dual selectable modes. It delivers a user-friendly interface that goes beyond traditional keyboard-only BIOS controls to enable more flexible and convenient input with quick scrolling. Users can easily navigate the UEFI BIOS with the smoothness of their operating system. Quick and simple overclocking and setup sharing is facilitated by the F12 hotkey BIOS snapshot feature. The exclusive EZ Mode displays frequently-accessed setup info, while the Advanced Mode is for experienced performance enthusiasts that demand far more intricate system control, including detailed DRAM information.

Please see TECH180744 for more information on the supported types of UEFI today. 

You can also suscribe to the feature request for UEFI support to be notified when a compatible version is made available:

TECH194616

If/when you consider your issue resolved, please click Mark As Solution on the most helpful response.

vaibhav_jain1's picture

OK.

Encryption pausing at 0.0%, UI Issues like 'Resume button greyed out', 'incorrect encryption progress', 'unknown bus' are known issues and targetted for future releases.

2013 should see major releases coming out solving most of the issues reported on this forum.

Luuk's picture

This is also happening for example with the HP 8470P Laptop.

I hope there will be a solution / update Soon!

PGP_Ben's picture

We are working on a solution. I can't give solid dates yet unfortunately. But the workaround is to backup any existing user data, disable EFI in the BIOS (Set to legacy mode instead), wipe the disk drive (not a format but a full disk wipe using a secure erase method), then reinstall your OS and re-encrypt.

If/when you consider your issue resolved, please click Mark As Solution on the most helpful response.