Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

using older PGP recovery disk

Created: 24 Jan 2013 • Updated: 28 Jan 2013 | 4 comments
This issue has been solved. See solution.

Hello,

We use PGP WDE in our work environment.  One of our technicians is using a 10.0.2 recovery disk to decrypt a 10.1.2 encrypted drive and the decryption has already begun.  I understand that we're not supposed to use older versions (such as version 9 recovery on a version 10 encrypted disk) but does this also apply to revision versions?  Symantec's page on recovery disks doesn't mention it.  http://www.symantec.com/business/support/index?pag...

Thanks,

Peggy

Comments 4 CommentsJump to latest comment

Tom Mc's picture

The correct version should be used.  If for some reason you have to use a different version, such as not knowing what version you need, it is better to err on the side of using a newer version.  However, regardless of which version you use, it is most likely problems will occur if you stop the decryption once it has started.  I'd recommend using the correct version in the future, but continuing with any decryption that is in progress. 

When you consider your issue resolved, please click Mark As Solution on the most helpful response.

Search the Knowledge Base &

pchan8001's picture

Thanks Tom.  We don't intend to stop the decryption that has already begun.

What do you consider "correct version"?  In my case, I'm asking if it is ok to use 10.0.2 recovery disk on a 10.1.2 encrypted drive.  Would these be considered "different versions" or would that only apply to ones that are not dot revisions, such as version 9 and 10?

Tom Mc's picture

10.1.2 should be used for 10.1.2

When you consider your issue resolved, please click Mark As Solution on the most helpful response.

Search the Knowledge Base &

pchan8001's picture

Here is a follow-up to my original question.  I have not been able to get this information from the Symantec support pages, or from the forum so hopefully this will help others.

10.0.2 was able to decrypt 10.1.2, although it is best method to use the same revision or newer to decrypt via recovery disk. 

I am assuming now that when Symantec says on their kb article http://www.symantec.com/business/support/index?page=content&id=TECH152604  "Note that recovery disks work only with the version of PGP Desktop that created the recovery disk. For example, if you attempt to use a 9.x recovery disk to decrypt a disk protected with PGP Desktop 10.0, any data on the PGP Whole Disk Encrypted 10.0 disk will be unrecoverable." that "version" stands for 9 and 10 and not 10.1.x.

Peggy

SOLUTION