Full Disk Encryption Recovery Overview
|
Third-party tools and Windows automatic repairs Do not perform any repairs using third-party tools and allow Windows automatic repair to complete (do not cancel it), as these actions can lead to irrecoverable data loss. |
|
Connecting an encrypted disk If the machine you are decrypting does not boot due to a hardware failure, connect the encrypted disk to another machine as the only connected disk. Connect the disk as a bootable device. Connecting an encrypted disk using Caddy or other similar connection will not work. When connected correctly, follow the steps below. |
If you can boot Windows normally, decrypt a standalone workstation from Windows:
1.Ensure you are logged into the key file, right-click the notification tray icon, and select Full Disk Encryption.
2.Click Manage Disks.
3.Select the disk and click Decrypt.
4.Type the FDE Admin password to begin decryption.
5.Repeat the process for any additional encrypted disks. When completed, the pre-boot login screen will be removed.
Decrypt the standalone UEFI BIOS workstation that is unable to start Windows
Use the ESET Recovery Media Creator
1.Insert an empty USB drive into your computer.
|
Ensure that the USB device has a FAT 32 formatted partition. The partition is required to set up the ESET Recovery Media Creator. |
2.Download the ESET Recovery Media Creator.
3.Run the utility and click Next to continue.
4.Click Win RE USB 32 & 64 bit.
|
When you create a Win RE USB, the architecture (x86 / x64) of the utility´s host system must match the target system needing recovery. |
5.Select the Destination disk for the recovery media and click Next.
6.Click EEE Standalone.
7.Optionally, if ESET support instructs you, select only additional support files.
8.Click Next.
9.Click Start to create the recovery media
10. In Confirm window, click Yes to format the USB drive and create the recovery media.
11. Wait until the utility completes the creation process.
12. Click Finish.
13. Safely eject the USB drive.
Decrypt the workstation
1.Insert the ESET Encryption Recovery USB drive and boot the workstation from the USB.
If the device has booted correctly, the Language selection window displays.
2. Select the desired language to continue.
3.Select the option to Decrypt all encrypted disks (using credentials).
4.A warning message displays; click Yes to continue.
5.Select the FDE user you want to use for decryption and press the Enter key.
6.Type the password for the FDE user you selected and click OK.
7.Select Secure or Performance mode to initiate the decryption process.
•Secure: Throughout the recovery process, a checkpoint will be saved to minimize data loss if the recovery process is interrupted. We recommend selecting this modes when recovering critical data. Depending on the size of the disks(s), this may take a long time to complete.
•Performance: The recovery process is optimized for speed and will complete quicker than Secure mode. Data may be lost if the recovery process is interrupted.
|
Let the process complete and do not shut down or power the machine off. |
8.When the computer is successfully decrypted, click OK.
9.Click Shutdown.