How to get passphrase of group key in 8.1?

Question

If Files are automatically encrypted with endpoint encryption group key on removable devices, how can I get the key in management console to decrypt files with sophos portable. That's required as this device can never be attached to a computer connected to management console.

This thread was automatically locked due to age.

Funkey · Answer

Hi Fred, 
 as said the only keys that have a passphrase are local keys (these are the ones users can create on their systems). 
 All keys generated automatically (e.g. during the import of the AD structure) or manually in the MC by an SO, do not have a passphrase that can be used in sgportable. 
 However, the recovery process does not require a passphrase, as the access to encrypted files can easily be achieved by assigning the corresponding key to another users keyring. 
 An exception that requires an extra step, are so called "personal keys" which need to be demoted first before you can assign them to another user. 
 Hope that helps. 
 F.