Endpoint Encryption

There are some workstations that shipped with two disks, primary disk loaded with OS and the end user use the secondary disk to store data,

They are Windows 7 workstations with SEE 11.1.1 version installed or upgraded from 8.x to 11.1.1.

I have few cases that support professionals re-image the workstation without backing up the data on the secondary disk, but pulled out the machine when re-imaging the workstation, the system was re-imaged with same host name, therefore the recovery key on the database was overwritten.

The primary disk was reformatted and re-imaged. I was attempting to use Reover Utility to accesss to the disk or decrypt the disk without any success.

Does anyone run the disk recovery under same scenario before? or my question is if I can still recover the data on the secondary didk without primary disk?

 

 

 

 

I think you've lost the data on those 2nd disks, I'm afraid.

All the SEE8.* related documentation, seems to suggest the key for the 2nd disk is either stored on the 1st disk, or in the DB.  With both key locations lost, you're a bit stuck :'(

http://www.symantec.com/docs/TECH157205

I saw that KB in the past, it is applied to SEE 8.* clients, since SEE 11.x has changed quite a lot by getting some PGP technology into the product. I am just thinking if the secondary disk recovery still the same? or rhere are something different we might be able to try?

Check out this link: https://support.symantec.com/en_US/article.TECH157205.html

I think this might apply to the but I am not positive... I have a computer in which I added a second m.2 sata to the wwan slot on a Dell e5570... I installed Windows 10 on that device and when I came back and tried to boot off the primary drive I could logon but it said missing operating system. I then removed the second drive I added and o could not boot at all to the HDD... Turns out the windows 10 installation was somehow corrupted. I lost access to the image so I installed Windows 8.1... Since then I can boot into windows 8.1 and it can see that primary drive... It sees it as blank space. I am assuming this is due to the encryption ... I need to recover the files on this drive. I downloaded a trial version of Symantec endpoint encryption 11.1.3, but have yet to figure out how to decrypt the drive so I can pull the data off. Any help would be much appreciated. Duatin

I also tried the winpe usb but it does not see the m.2 sata drives Dustin