Knowledgebase: Endpoint Encryption
How to Restore the EEPC MBR
Posted by James Gillies on 28 February 2011 02:52 PM


This document is designed to assist an operator in repairing solely the DPMS2 version of McAfee Endpoint Encryption.

It is not intended to support any other version.

This document requires access to a Safetech/Wintech bootable CD - Guide here. Click this link to download a zipped .iso image of the Safetech/WinTech disc.

Steps required for DPMS2 McAfee Endpoint Encryption – “How to Restore the EEPC MBR”  

1..... Boot the WinTech CD

2..... Start WinTech and Authenticate From Database

3..... Remove EEPC


N.B. You must also have the .sdb file supplied by Safeboot Support on the root of your USB disk. You will use this file to “Authenticate From Database” – details on section 2.

1.    Boot the WinTech CD

Boot into the SafeTech/Wintech CD… and choose option 2 to start Wintech…

Option 2 selection

Wintech will start (It’s a BartPE with Safeboot plugin installer, it will look like a normal Windows XP start-up routine)

WinTech Booting

Wintech is booting…


Choose “No to starting “Network Support”

Network Support?

2.    Start WinTech and Authenticate From Database

Safeboot Support will have instructed you to “Authenticate From Database” for which you will have been supplied a .sdb file for your machine over email. 

This section assumes you will authenticate using the .sdb file supplied by Safeboot Support. As described in section 1 please ensure that you have inserted the USB disk containing the .sdb file (at the root of the USB disk) BEFORE you boot the machine with the WinTech CD or else the USB disk will not be seen by WinTech.

From the “Go” menu at the bottom left of your screen, start “SafeBoot WinTech”


Enter the Authorisation Code for today (it is a four digit number that changes every day, ask contact Support for the relevant code)

Authorisation Code

Look at the bottom-right of your screen, you will see that you are “Authorised” which means you have entered the correct daily authorisation code.

Auth No Auth

You will now need to “authenticate” to SafeBoot so that you can read the contents of the encrypted drive, so from the menu at the top of the screen choose “WinTech / Authenticate From Database”

Auth from DB

A dialog box will open prompting you to choose the location of your .sdb file – As per the screenshot you should be able to select the USB disk from the drop down:

Select Location

Once you have selected the USB disk you should be able to select the .sdb file as shown below:

Selecting SDB

You will be presented with a “Select Machine” dialog box, make sure that this machine name matches what you expect it to be and press “OK”.

Selecting Machine

Look at the bottom-right of your screen, you will now see that not only are you “Authorised” (because of the correct daily authorisation code being entered) you will also be “Authenticated” because you have successfully logged into you encrypted drive (SafeBoot).

Auth & Auth

NB. If you are NOT both “Authorised” AND “Authenticated” do not proceed any further and contact Safeboot Support for advice.

From the top of the screen, choose the “Algorithm” menu and choose “Select Alg”

Select Algorithm

Select the “SafeBoot FIPS AES (256 bit)” algorithm and click “OK”

Selecting SafeBoot Algorithm

3.    Restore the EEPC MBR

From the top of the screen, choose the “WinTech” menu and choose “Restore EEPC MBR”

Remove EEPC

Select the “Yes” button… The McAfee “Endpoint Encryption for PC” MBR (Master Boot Record) will now be restored from the configuration file for your machine (the .sdb file).

Remove EEPC

The Master Boot Record has now been restored successfully.

Time Remaining

Click on the "Go" menu and select the menu options to restart your computer. The machine will then restart and attempt to boot as normal. Depending on the configuration of your Endpoint Encryption settings you will see the pre-boot environment as normal - or boot into Windows if you are uing "Autoboot".

Time Remaining

            ---   Procedure Ends   ----


©2e2 (Jersey) Limited

(7 vote(s))
This article was helpful
This article was not helpful

Comments (2)
Mike Kocziban
28 September 2011 01:33 PM
Very helpful - my colleague thought their laptop was doomed!
Shane Morley
31 January 2012 12:56 PM
Superb! The only advice I can offer is to follow the instructions word for word, i.e. ensuring the USB pen is in the machine prior to booting up.
Help Desk Software by Kayako Case