Hi,

I'm trying to recover data from a client's 2TB Western Digital Passport (MDL: WD20NPVT-00Z2TT0). The drive is in perfect condition physically, and I'm able to image it completely with PC-3000 software. But the data is encrypted, beyond just native WD encryption, which PC-3000 can decrypt automatically. WD Marvell utility detects a decryption key, but when I select the key it asks me for a password.

They always kept their drive plugged into their iMac so they don't remember what password they chose when setting up/encrypting the drive (I'm assuming they used WD SmartWare). It seems like their password would be stored somewhere on their computer, but I'm not sure where that would be (I'm gonna have them check in Keychain). Any advice? Thank you!

If the drive is physically fine why not just plug it back into the mac and copy the data?

Have you checked the image with something like r-studio or ufs-explorer they seem to have a better understanding of container based encryption that DE.

_________________
Data Recovery Services in the UK.
https://www.usbrecovery.co.uk/

I can probably bypass the password if you want to outsource it.

_________________
SAN, NAS, RAID, Server, and HDD Data Recovery.

We too able too to bypass it...

along with Doomer

_________________
Kuwait Data Recovery - UNIX GTC
The only reason for time is so that everything doesn't happen at once. By: Albert Einstein

Unfortunately the customer mailed their drive so I wouldn't have access to their computer unless they mailed it, which is not something I wanna deal with. They've also told me they're uncomfortable with me logging into their computer remotely, so that eliminates any potential solutions that would require their computer.

I imaged it in R-STUDIO/UFS as well, but I didn't get anything. I'm not interested in outsourcing, but thank you all for the offers & suggestions.

When you figure it out, I'd be happy if you'd share the solution with me.

_________________
Luke
Recovery Force Donor Inventory: 5,000+ Fully Cataloged HDDs & Growing

you can clone it with SED off to a similar drive which you turn SED off as well, then copy 02 and SED related modules to the target and turn SED back on and mail them the drive and hope you did everything right
a bit freaky ...

_________________
Adatmentés - Data recovery

This is likely a JMicron JMS538S based drive

_________________
SAN, NAS, RAID, Server, and HDD Data Recovery.

_________________
A backup a day keeps DR away.

thanks !