Knowledgebase
Knowledgebase
How to Recover Data from a Safeboot Encrypted Hardrive
Posted by Kim Vallance on 28 March 2012 10:42 AM

 

This document is designed to assist an operator in repairing or removing solely the DPMS2 version of McAfee Endpoint Encryption. It is not intended to support any other version.

Contents                                                                                    

DPMS2 McAfee Endpoint Encryption – “WinTech Data Recovery”.

1..... Pre-requisites

2..... Boot the WinTech CD

3..... Start WinTech and Authenticate From SBFS

3..... Start WinTech and Authenticate From Database

4..... Recover Data

 

1.     Pre-requisites

IMPORTANT: Plug in your external USB hard drive or USB stick that you intend to copy your recovered data from the encrypted drive. This must be done before you boot the SafeTech/WinTech CD or the drive will not be available, rendering all steps below pointless.

N.B. You must also have the .sdb file supplied by Safeboot Support on the root of your USB disk if you have been instructed to “Authenticate From Database” – details on section 3.

 

2.     Boot the WinTech CD


Boot into the SafeTech/Wintech CD… choose option 2 to start Wintech…

Wintech will start (It’s a BartPE with Safeboot plugin installer, it will look like a normal Windows XP start-up routine)

Wintech is booting…

 

Choose “No to starting “Network Support”




 

 

3.     Start WinTech and Authenticate From SBFS


Safeboot Support will have either instructed you to “Authenticate From SBFS” if you are able to use your existing username and password at the Pre-Boot stage, or else you will have been instructed to “Authenticate From Database” for which you will have been supplied a .sdb file for your machine via a link in an email.

This section assumes you will authenticate using your username and password.

From the “Go” menu at the bottom left of your screen, start “SafeBoot WinTech”

Enter the Authorisation Code for today (it is a four digit number that changes every day, ask support@dpms2.com for the relevant code)


 

 

You will need to “authenticate” to SafeBoot so that you can read the contents of the encrypted drive, so from the menu at the top of the screen choose “WinTech / Authenticate From SBFS”

Choose “Password Only Token” and click “OK”

You will be presented with the McAfee Endpoint Encryption logon screen, please enter your normal (working) SafeBoot / McAfee Endpoint Encryption credentials that you would normally use at the pre-boot stage (before Windows boots)

Look at the bottom-right of your screen, you will see that you are “Authorised” which means you have entered the correct daily authorisation code.


 

 

Once you have entered your credentials, click on “OK”

Look at the bottom-right of your screen, you will now see that not only are you “Authorised” (because of the correct daily authorisation code being entered) you will also be “Authenticated” because you have successfully logged into you encrypted drive (SafeBoot).

 

NB. If you are NOT both “Authorised” AND “Authenticated” do not proceed any further and contact Safeboot Support for advice. The next step would be for them to supply you with a unique “Database File” also known as an “.sdb file” which you will be able to use to authenticate to the machine. The instructions for use of this file are covered in the next section (3).


 

 

From the top of the screen, choose the “Algorithm” menu and choose “Select Alg”

 

Select the “SafeBoot FIPS AES (256 bit)” algorithm and click “OK”

 

If you have successfully authenticated please now skip to section 4 “Recover Data”.

 

3.        Start WinTech and Authenticate From Database

Safeboot Support will have either instructed you to “Authenticate From SBFS” if you are able to use your existing username and password at the Pre-Boot stage, or else you will have been instructed to “Authenticate From Database” for which you will have been supplied a .sdb file for your machine over email.

This section assumes you will authenticate using the .sdb file supplied by Safeboot Support. As described on page 1 please ensure that you have inserted the USB disk containing the .sdb file (at the root of the USB disk) BEFORE you boot the machine with the WinTech CD or else the USB disk will not be seen by WinTech.

From the “Go” menu at the bottom left of your screen, start “SafeBoot WinTech”

 

Enter the Authorisation Code for today (it is a four digit number that changes every day, ask support@dpms2.com for the relevant code)

 

 

Look at the bottom-right of your screen, you will see that you are “Authorised” which means you have entered the correct daily authorisation code.

 

You will now need to “authenticate” to SafeBoot so that you can read the contents of the encrypted drive, so from the menu at the top of the screen choose “WinTech / Authenticate From Database”

 

A dialog box will open prompting you to choose the location of your .sdb file – As per the screenshot you should be able to select the USB disk from the drop down:

 

 

Once you have selected the USB disk you should be able to select the .sdb file as shown below:

 

You will be presented with a “Select Machine” dialog box, make sure that this machine name matches what you expect it to be and press “OK”.

 

Look at the bottom-right of your screen, you will now see that not only are you “Authorised” (because of the correct daily authorisation code being entered) you will also be “Authenticated” because you have successfully logged into you encrypted drive (SafeBoot).

 

NB. If you are NOT both “Authorised” AND “Authenticated” do not proceed any further and contact Safeboot Support for advice.


 

 

From the top of the screen, choose the “Algorithm” menu and choose “Select Alg”

 

Select the “SafeBoot FIPS AES (256 bit)” algorithm and click “OK”

 


 

 

4.     Recover Data

From the “Go” menu at the bottom left of your screen, choose “Programs” and “A43 File Management Utility”

 


 

 

Your encrypted drive will now be available to read from and copy data to your external hard disk / USB drive. In this example screenshot below the SafeBoot drive is “Local Disk (C:)” but it may be a different drive letter in your installation, although this is rare.

 

Navigate through your encrypted drive and copy and paste the data you wish to keep to your external drive. Once complete reset your machine as normal by choosing “File, Exit” from the WinTech menu, and then “Go, Shutdown, Shutdown”

---   Procedure Ends   ----

(10 vote(s))
This article was helpful
This article was not helpful

Comments (0)
Help Desk Software by Kayako Case