WD Encryption - Forgot Password

[cacadia_recovery]

Hi,

I'm trying to recover data from a client's 2TB Western Digital Passport (MDL: WD20NPVT-00Z2TT0). The drive is in perfect condition physically, and I'm able to image it completely with PC-3000 software. But the data is encrypted, beyond just native WD encryption, which PC-3000 can decrypt automatically. WD Marvell utility detects a decryption key, but when I select the key it asks me for a password.

They always kept their drive plugged into their iMac so they don't remember what password they chose when setting up/encrypting the drive (I'm assuming they used WD SmartWare). It seems like their password would be stored somewhere on their computer, but I'm not sure where that would be (I'm gonna have them check in Keychain). Any advice? Thank you!

[Lardman]

If the drive is physically fine why not just plug it back into the mac and copy the data?

Have you checked the image with something like r-studio or ufs-explorer they seem to have a better understanding of container based encryption that DE.

[Doomer]

I can probably bypass the password if you want to outsource it.

[einstein9]

We too able too to bypass it...

along with Doomer

[cacadia_recovery]

Unfortunately the customer mailed their drive so I wouldn't have access to their computer unless they mailed it, which is not something I wanna deal with. They've also told me they're uncomfortable with me logging into their computer remotely, so that eliminates any potential solutions that would require their computer.

I imaged it in R-STUDIO/UFS as well, but I didn't get anything. I'm not interested in outsourcing, but thank you all for the offers & suggestions.

[lcoughey]

When you figure it out, I'd be happy if you'd share the solution with me.

[pepe]

you can clone it with SED off to a similar drive which you turn SED off as well, then copy 02 and SED related modules to the target and turn SED back on and mail them the drive and hope you did everything right
a bit freaky ...

[Doomer]

you can clone it with SED off to a similar drive which you turn SED off as well, then copy 02 and SED related modules to the target and turn SED back on and mail them the drive and hope you did everything right
a bit freaky ...

This is likely a JMicron JMS538S based drive

[fzabkar]

http://www.hddoracle.com/download/file.php?id=2298

[suricate.ch]

http://www.hddoracle.com/download/file.php?id=2298

thanks !