Endpoint Encryption

 View Only
  • 1.  How to mount encrypted disk to another PC

    Posted Apr 19, 2017 03:08 AM

    Hi,

    i am testing Symantec Endpoint Encryption Manager (11.1.2). I make a Windows client from SEE Software setup and i installed SEE client software to a workgroup PC. Everything is running quite fine.

    When i unmount encrypted disk and mount it to another PC (my target is understand to what happened if OS failed to boot and save files from encrypted disk), i can not reach Windows file system even if i have a SEE master key. When i use BitLocker, mounting disk to another PC is easy if i know the password of BitLockered disk's.

    I followed this instruction but i failed to make. I have 2 questions?

    1- How can i get file system from encrypted file when i mount encrypted disk to another PC? Is it only way to make recovery USB's? If it is, isn'T it dependent to SEE version and OS. For example, if i have 3 different types of Windows versions (7, 8, 10 etc), do i have to make 3 different USB recovery sticks?

    2- Is it a way to reach encrypted disks like BitLocker scenerio? Mount and save?

    All helps are appreciated. Thanks a lot.

     

     

     



  • 2.  RE: How to mount encrypted disk to another PC

    Posted Apr 21, 2017 03:58 AM

    Here's my 2 pence worth... :)

    1. The recommended method to disk recovery in SEE is using the WinPE CD/USB (http://www.symantec.com/docs/TECH223783), and to use files from the version of SEE on the encrypted drive (i.e. create it as soon as you can).  It doesn't really matter which version of Windows is being used as long as WinPE supports the filesystem.  Therefore, in your example, as long as all machines are running the same version of SEE, the you should just need the one recovery WinPE.
    2. This is not possible in SEE, but is possible in SED (http://www.symantec.com/docs/TECH170574)