Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 12 replies
  • Subscribers 5 subscribers
  • Views 44141 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Remove Encryption - Safeguard Enterprise

Roberto

Hi guys!!

I have the following scenario: a Windows Xp Professional SP3 with the SGN client installed. I've made a policy for encryption of the c: and d: volumes. The encryption was set to use the machine key.

Question: I would like to know how we remove the encryption of the volumes. I've tried to change the policy to "No Encryption" but it didn't change anything. Is there any tool for booting and remove the encryption like in Safeguard Easy?

I really appreciate any help!!

Happy new year!!

Roberto

:567


This thread was automatically locked due to age.
Parents
  • 0

    Hi Roberto,

    Are you trying to access the encrypted drive for data recovery to re-image or do you want to keep the SGN Client installed but decrypt the drive?

    • To perform the former, it's as simple as plugging the drive into an already encrypted SGN Client, then assign yourself the BOOT_<machine_name> key. After you sync up you should be able to see the encrypted drive, if not, then logout and login to refresh your key-ring.
    • To perform the latter, it requires 2 policies to be set and 1 user action from the encrypted device.
    1. Make sure that in the SGN MC the Device Protection policy item that the 'User may decrypt volume' is set to 'Yes'. If that is not already set to 'Yes', then you will need to change it to 'Yes' and perform a sync at the client you want to decrypt. You can run c:\>SGMCmdIntn.exe -s if you like.
    2. When the sync is done, go back into the SGN MC and to the Device Protection policy item. Now change the 'Media encryption mode' policy to 'No encryption'. Sync on the SGN Client again.
    3. Assuming this was all done properly and the sync completed successfully, you should then go to the Properties of your C: drive. There will be an Encryption tab.
    4. Within the Encryption tab settings you should see an option labelled 'Media encrypted' with a checkbox enabled. Uncheck the box, click Apply and watch your drive decrypt.

    In the event that you are performing data recovery and neither of these suggestion work for you, please take a look through the Recovery Document found in this KB http://www.sophos.com/support/knowledgebase/article/108156.html.

    Let us know your results so others can benefit from your experiences. Thanks in advance.

    :579
Reply
  • 0

    Hi Roberto,

    Are you trying to access the encrypted drive for data recovery to re-image or do you want to keep the SGN Client installed but decrypt the drive?

    • To perform the former, it's as simple as plugging the drive into an already encrypted SGN Client, then assign yourself the BOOT_<machine_name> key. After you sync up you should be able to see the encrypted drive, if not, then logout and login to refresh your key-ring.
    • To perform the latter, it requires 2 policies to be set and 1 user action from the encrypted device.
    1. Make sure that in the SGN MC the Device Protection policy item that the 'User may decrypt volume' is set to 'Yes'. If that is not already set to 'Yes', then you will need to change it to 'Yes' and perform a sync at the client you want to decrypt. You can run c:\>SGMCmdIntn.exe -s if you like.
    2. When the sync is done, go back into the SGN MC and to the Device Protection policy item. Now change the 'Media encryption mode' policy to 'No encryption'. Sync on the SGN Client again.
    3. Assuming this was all done properly and the sync completed successfully, you should then go to the Properties of your C: drive. There will be an Encryption tab.
    4. Within the Encryption tab settings you should see an option labelled 'Media encrypted' with a checkbox enabled. Uncheck the box, click Apply and watch your drive decrypt.

    In the event that you are performing data recovery and neither of these suggestion work for you, please take a look through the Recovery Document found in this KB http://www.sophos.com/support/knowledgebase/article/108156.html.

    Let us know your results so others can benefit from your experiences. Thanks in advance.

    :579
Children
No Data
Unfiltered HTML