Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Recovery for encrypted files with lost keys

Hi,

I'd like to seek assistance in my issue with SGN 5.5

I created a policy for file based encryption using a machine define key, however instead of using removable drive as the target for this policy I accidentally deployed it using Local Storage option. After the policy has been deployed it started to encrypt all files in my drive D:/ and I have no option to cancel it, so I just waited hoping I can revert the changes, but somewhere along the way, the computer rebooted, after I log back it, it reboots again after loading everything including the SGN client icon and it does it in a loop. I need to remove the policy from the MC and that allowed me to log in again. However I noticed that most of my files in drive D:/ were already encrypted. I tried to check the file status and it says "file encrypted with 0x62.... key" that I can't find. I tried looking for mek* keys, or boot keys from the MC but nothing shows, I even added all keys available for the user but I can't open the encrypted files.

Any suggestion how I can recover the files that were already decrypted?

Thanks,

:5684


This thread was automatically locked due to age.
Parents Reply Children
No Data