Knowledgebase
Knowledgebase
SafeTech Emergency Boot
Posted by on 18 October 2010 02:26 PM



 

This document is designed to assist an operator in performing an "Emergency Boot" of a DPMS2 version of McAfee Endpoint Encryption for PC. It is not intended to support any other process.

This document requires access to a Safetech/Wintech bootable CD. Click this link to download a zipped .iso image of the Safetech/WinTech disc.

 

What Causes a Corrupt Database?

Corruptions can be caused by failed installations, bad sectors or failing drives on the endpoint systems, unsupported proceedures or disconnected network links to the Object Directory.

Poor and slow access to the Object Directory can cause a slow or intermittent access to the database. This can cause the Object Directory to corrupt during database operations.

 

What is the Solution?

 Perform an 'Emergency Boot' to place a fresh copy of the database onto the machine.

 

Steps required for DPMS2 McAfee Endpoint Encryption – “Emergency Boot”

1..... Boot the Safetech / WinTech CD

2..... Start SafeTech and Authenticate From SBFS 

3..... Start SafeTech and Authenticate From Database

4..... Perform an Emergency Boot.

 

N.B. You must also have the .sdb file supplied by Safeboot Support on the root of your USB disk if you have been instructed to “Authenticate From Database” – details on section 3.

1.    Boot the Safetech / WinTech CD

Boot into the SafeTech/Wintech CD… and choose option 1 to start Safetech… you may need to change the "Boot Order" on your computer first or access the "One-Time Boot Menu" on your computer, dependant on what function your computer supports. Please refer to your computer user guide for clarification if needed. (Usually the Esc, F2, F10 or F12 keys during system start-up are a good place to start)

Safetech Screenshot 1

Safetech will start up and then ask you for todays “Authorisation Code”

Daily Authorisation Code Screenshot

Enter the Authorisation Code for today (it is a four digit number that changes every day, please contact Support for the relevant code)

 

Look at the bottom-left of your screen, you will see that you are “Authorised” which means you have entered the correct daily authorisation code.

 

Authorised and not authenticated screenshot

2.    Start SafeTech and Authenticate From SBFS


Safeboot Support will have either instructed you to “Authenticate from SBFS” if you are able to use your existing username and password at the Pre-Boot stage, or else you will have been instructed to “Authenticate From Database” for which you will have been supplied a .sdb file for your machine via a link in an email.

This section assumes you will authenticate using your username and password.

From the “Safeboot” menu at the top left of your screen, choose “Authenticate from SBFS”

Authenticate from SBFS screenshot

You will now be presented with a “Select Token” screen which will contain “Password Only Token” - click on “Logon With Selected Token”

Login with selected token Screenshot

You will be presented with the McAfee Endpoint Encryption logon screen, please enter your normal (working) SafeBoot / McAfee Endpoint Encryption credentials that you would normally use at the pre-boot stage (before Windows boots)

Safetech Login

Look at the bottom-right of your screen, you will now see that not only are you “Authorised” (because of the correct daily authorisation code being entered) you will also be “Authenticated” because you have successfully logged into you encrypted drive (SafeBoot). You also need to make sure that the “WrkSpc: 0x12” is also showing, that means you are using the correct encryption algorithm. 

Authorised and authenticated

NB. If you are NOT both “Authorised” AND “Authenticated” do not proceed any further and contact Safeboot Support for advice. The next step would be for them to supply you with a unique “Database File” also known as an “.sdb file” which you will be able to use to authenticate to the machine. The instructions for use of this file are covered in the next section (3).

 

If you have successfully authenticated please now skip to section 4 “Perform an Emergency Boot”.

3.    Start SafeTech and Authenticate From Database


Safeboot Support will have either instructed you to “Authenticate from SBFS” if you are able to use your existing username and password at the Pre-Boot stage, or else you will have been instructed to “Authenticate from Database” for which you will have been supplied a .sdb file for your machine over email. 

This section assumes you will authenticate using the .sdb file supplied by Safeboot Support. As described on section 1 please ensure that you have inserted the USB disk containing the .sdb file (at the root of the USB disk) BEFORE you boot the machine with the Safetech / WinTech CD or else the USB disk will not be seen by SafeTech.

You will now need to “authenticate” to SafeBoot so that you can read the contents of the encrypted drive, so from the menu at the top left of the screen choose “SafeTech / Authenticate from Database”

Authenticate from Database

A dialog box will open prompting you to choose the location of your .sdb file – As per the screenshot you should be able to select the USB disk from the drive letters on the left:

Select drive for DB

Once you have selected the USB disk you should be able to select the .sdb file as shown below:

Selecting db

Look at the bottom-right of your screen, you will now see that not only are you “Authorised” (because of the correct daily authorisation code being entered) you will also be “Authenticated” because you have successfully logged into you encrypted drive (SafeBoot). You also need to make sure that the “WrkSpc: 0x12” is also showing, that means you are using the correct encryption algorithm. 

Authorised and authenticated

4.    Perform an Emergency Boot


From the top left of the screen, choose the “SafeBoot” menu and choose “Emergency Boot”

Emergency Boot

Answer the question appropriately and click either the “Yes” or “No” button…

Choose OS

Acknowledge the message informing you that SafeTech will now “emergency boot into Windows” and click on “OK”…

Ack Boot into Windows

Windows will now start to boot…

 

Once logged into windows you will need to synchronise McAfee Endpoint Encryption. To do this right click on the 'Mafee Endpoint Encryption' or 'Safeboot' icon in the system tray in the bottom right of your screen. Select 'Show Status'. A new window will appear. Click 'Synchronise'. The writing will now start moving up the screen. When it says 'Applying cryption changes' at the bottom you can restart the machine and test.

 

            ---   Procedure Ends   ----

 

©2e2 (Jersey) Limited


Attachments 
 
(12 vote(s))
This article was helpful
This article was not helpful

Comments (0)
Help Desk Software by Kayako Case