How to restore a Backup Exec System Recovery (BESR) 2010 or Symantec System Recovery (SSR) 2011/2013 PGP Encrypted image.

Article:TECH55306  |  Created: 2007-01-05  |  Updated: 2013-12-30  |  Article URL
Article Type
Technical Solution


Does Backup Exec System Recovery (BESR) 2010 or Symantec System Recovery (SSR) 2011/2013 work with PGP Encryption software?


You can back up a PGP-encrypted volume without any issue. However, while recovering a PGP-encrypted system volume a manual workaround (mentioned below) is required.

Consider the following points while backing up or restoring PGP-encrypted volumes:

  • If multiple volumes are encrypted and you are performing a hot backup (backup while OHS is running), you must back up all the encrypted volumes. In case of system volume restore, you must restore all the volumes.
  • During hot backups of encrypted volumes, the encryption is not retained. Hence, after you restore, you must encrypt them again.
  • If you have cold backups of PGP-encrypted volumes, you must restore the backups with the same partition layout (start offset, size, and sequence) and on the same disk.


To restore a computer with PGP-encryption, after you boot your computer using the Symantec Recovery Disk CD/DVD and restore your primary drive, you must rewrite the Master Boot Record (MBR) after the restore and before rebooting.

You can do so by performing the following steps:

  1. Boot into the Symantec recovery environment using the Symantec Recovery Disk (SRD).
    Note: If using a USB SRD, copy the MANAGER folder from a CD\DVD SRD to the root of USB drive before booting to the USB SRD. 
  2. Connect the backup media to your computer.
  3. Run the Recover My Computer wizard and restore your computer. Do not allow the computer to reboot when finished.
  4. When the restore is complete, click the Analyze tab.
  5. Click on Command Prompt.
  6. Navigate to the Symantec Recovery Disk drive letter.
  7. Rewrite the Master Boot Record using the following command:

    For Windows XP/2003:
    D:\MANAGER\Bootsect.exe /nt52 C: /mbr

    For Windows Vista or later:
    D:\MANAGER\Bootsect.exe /nt60 C: /mbr

    Example, with successful return message:

  8. Reboot the system.
  9. Once back into Windows, it will be necessary to re-encrypt the restored volume(s).

Legacy ID


Article URL

Terms of use for this information are found in Legal Notices