Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 4 replies
  • Subscribers 5 subscribers
  • Views 13271 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Bootable Rescue Image for Safeguard 5.6

fraudit
I'm a computer forensics engineer and will be soon dealing for a case involving a machine protected with Safeguard 5.6. I'm supposed to be provided with relevant credentials but still for safety reasons I'm looking for a recovery tool to get inside. I know that for Safeguard 4.x there were recovery tools called Bootable Rescue Image provided as ISO files. Are the same files available for product line 5.x (and possibly later 6.x)? I haven't managed to find them in the Support section so if such tools exist, I'd be grateful if anyone could provide me with a link to download them.
:53569


This thread was automatically locked due to age.
  • 0

    Hi,

    You can get the recovery disks from here: http://www.sophos.com/en-us/support/knowledgebase/108805.aspx

    You will need to use the key recover tool on the disk to access the drive. Your client will have to provide you with a recovery token and you will need to do a challenge response with them.

    Let me know if you need more information.

    :53705
  • 0

    Thank you! However, I'm curious if another (and simpler) scenario would work.

    Would it be possible to simply image an encrypted drive and mount the resulting image into another system with Safeguard client installed? Would Safeguard recognize such disk image and - given proper credentials - allow accessing it directly?

    :53749
  • 0

    Yes there is:

    1. In the Safegaurd Management Center click on Users and Computers, find the hostname for your working laptop and select the local administrator account. Then select the “Key Tab”.
    2. Under “Available keys” find a key that matches the hostname of the broken laptop and drag and drop it to the pane on the right hand side. 
    3. Plug the HDD from the broken laptop into the caddy and connect it to the working laptop.
    4. Log into the working laptop as the local administrator. Ensure you right click on the Sophos Safegaurd icon and click “Synchronise”. You may need to restart the laptop for the changes to take effect.
       

    You can now open the encrypted HDD like you would any other HDD.
     

    :53753
  • 0

    Also if you still need to use the Key Recover I wrote a guide for it here: /search?q= 52893

    :53755
Unfiltered HTML