Retrieving data using Virtual Client

Hi M-ameen Ahmed Ahmed 

Would you check and confirm that you are using correct WinPE CD with the correct driver version of Safeguard Enterprise. Please refer to section 1.1.2( Retrieving data using virtual clients )and see you have performed the steps as listed in this article. 

Hi,

I use WinPE SGN 8.00.0.251 and I export recoverytoken.tok in USB & move it to SGN-Tool folder as mentioned in Recovery_in_SafeGuard_Device_Encryption.pdf Article. Please see Screenshot

Hi M-ameen Ahmed Ahmed 

This actually looks very weird issue to me. If the customer has encrypted the drive-through full disk encryption, it should show the key right there.

Would you please try to access the hard drive by slaving it to another computer? There is another option "Recovering Data by slaving Hard Drives" in the same PDF which will also show the key through which it is encrypted.

Please let me know how it goes.

Hi M-ameen Ahmed Ahmed 

This actually looks very weird issue to me. If the customer has encrypted the drive-through full disk encryption, it should show the key right there.

Would you please try to access the hard drive by slaving it to another computer? There is another option "Recovering Data by slaving Hard Drives" in the same PDF which will also show the key through which it is encrypted.

Please let me know how it goes.

Hello,

I tested the hard drive that encrypted by Sophos Windows 7 and I can decrypt the hard drive but when the same hard drive encrypted with  Sophos Windows 10 it doesn't work. So I think it doesn't support Windows 10. The PDF instruction is for windows 7. Could You please tel me how can i deal with this problem.

Best regards

Ahmed

Hi M-ameen Ahmed Ahmed 

Windows 10 uses BitLocker as native device encryption, Sophos just manages it and stores the key in the Safeguard database.

Please refer to the below article which explains the process for the windows 10 systems. The first article is for the data recovery process through slaving a drive and the second article is for exporting a recovery key to the USB drive.

• Sophos SafeGuard Enterprise: Data recovery by slaving Bitlocker encrypted drives
• SafeGuard Enterprise: Recovery of broken BitLocker Challenge/Response systems

Hello,

I try to open an Encrypted Driver but, it just gives the possibility to recover per USB, so I copy the recover Key in a USB but it doesn't work . Please see Screenshot. How can I export the key from the safeguard database?

Hi M-ameen Ahmed Ahmed 

Please follow the below article to export the recovery key to the USB drive.

• SafeGuard Enterprise: Recovery of broken BitLocker Challenge/Response systems

Hi,

It works now. I would like to say Thank You.

Kind regards

Ahmed

Hi M-ameen Ahmed Ahmed 

Glad to know that your issue has been resolved. Please feel free to contact us further in case you face any issue.