Endpoint Encryption

 View Only

  • 1.  SEE Access disk and Hard Disk program?

    Posted Sep 15, 2015 06:58 PM

    I am looking to do a sector by sectoryimage to recover encrypted data.

    I ahve run a cross the following technote. But I dont know how how to get out of the gate.

    https://support.symantec.com/en_US/article.TECH104163.html

     

    1. One of the things it says is "It is also possible to create an unencrypted image of an encrypted Harddisk by starting Ghost from within the SEE Access Disk once the log on process has completed"

    Question #1 is ...   What is a SEE Access Disk? Is it a WinPE disk with Ghost built in? And how do I "log on"?

    2. The othe thing the tech note says is "A raw sector-by-sector image is the only supported image once the Hard Disk User Program has been installed even if the drive is not encrypted"

    Question #2 is...What is the hard disk User Program?



  • 2.  RE: SEE Access disk and Hard Disk program?

    Posted Sep 24, 2015 02:04 PM

    The article you referenced is referring to SEE version 8.x, and may no longer be valid for SEE version 11.  The utilities mentioned do not exist for SEE 11.

    Using a customized WinPE disk with SEE drivers built in can allow you to attempt to recover the drive by using the following command:
    eedAdminCli --recover --disk 0 --au ClientAdmin --ap Passphrase

    More information on setting up WinPE can be found here:
    https://support.symantec.com/en_US/article.TECH223783.html