Recovery from Safeguard Easy Encrypted drive

[kpeddie]

Had this one here for a few days and looking for a solution. Drive is encrypted using Safeguard Easy 4.20. I have user password and if i enter that it tries to boot to the first partition on the drive which in this case is a Dell diagnostics unencrypted partition. Ive tried booting to external media like a BartPe disk but it wont let me boot to any external device, assuming the user hadn't got rights to do this.

Ive looked around and found a couple of forensic progs, that say will decrypt partition but looking for a solution that wont cost $3000 just to buy the software.

Anyone have any other solutions or ideas?

I've already imaged drive, one bad sector in an area of the disk that shouldn't make a difference to it so don't think that was the issue it failed.

Thanks

[Cleanroom]

ask the customer if they have a safeguard emergency CD, it is a bart pe disc that has the safeguard software on it. That way you can authenticate the encryption and do a full drive decryption.

[kpeddie]

They havent. I thought you could only use those disks if you can boot to a device after the PBA screen, which it wont let me do. I can boot to external devices from BIOS but not after.

[Nick_CT]

I have done a few of these. If you have the password, all you need is an appropriate Bart PE with the SafeGuard 'add in'. Thinking back on it I remember making various versions of Bart PE discs until I got the right combination - some time, research/documentation reading and experimentation and you'll get there.

[Cleanroom]

the emergency disc are made to bootable to access the disc in its encrypted fom, IF the safeguard encyption area of the drive is still valid, you can load up the safeguard software from the bart pe disc and it will recognize that it is an encrypted disc, put in the master and user password for the drive and should authenticate them both, then do a full drive decryption. remove the drive and recover it like any other drive.

I do it all the time, unfortunately i do not have access to that version of the emergency disc and they are specific to each version.