OS Recovery for self-encrypting drives (How to OSRI an Encrypted FDE drive)

Problem:

The OS has become corrupt on a self-encrypting drive that is currently locked. Since the drive is currently locked, a Windows Boot disk does not recognize the drive and cannot recover the OS.

Solution:

In the event that the OS has become corrupt on a self-encrypting drive, please select one of the following methods to recover the drive:

Procedure 1
Accessing self-encrypting drives in an event of Windows OS corruption

1. Power up the unit when the Machine boots Drive will prompt you to present your Authentication credential.
2. Enter your credentials to authenticate to the locked drive.
3. After successful authentication halt the boot process by pressing F8 several times and Machine will halt the boot process. ( DO NOT RESTART AT THIS POINT)
4. At this point drive is successfully unlocked.
5. Place CD containing Operating System Repair CD or WIN-PE CD in the CD tray and press CTRL+ALT+DEL to RESTART the unit.
6. The WIN PE or OS CD will now be able to access the self-encrypting hard drive.

Procedure 2
Use of an eSATA external enclosure

Note: Wave supports use of the StarTech 2.5" eSATA & USB Drive Enclosure SAT2510U2E

1. Remove the drive from which data needs to be recovered from the original system and note the Drive serial number.
2. Place drive to be examined into eSATA enclosure and connect to a host system with primary drive that contains Wave client software properly configured for remote management. It is recommended to perform this step while unit is turned off.
3. Turn on the Host System and allow it to boot into windows.
4. From within EMBASSY Security Center, select Trusted Drive Manager and in the dropdown menu, select the appropriate drive.
5. Compare your noted Drive serial number to the number listed in TDM to ensure you have selected the correct drive.
6. Select Manage and enter in the credentials of the drive administrator. The drive administrator is the original user used to initialize the drive.
7. Turn off drive locking, and uninitialize the drive.
8. With the drive now uninitialized, you may place it back in its original machine and boot to a Windows PR or OS CD to repair or reinstall the OS.

Article ID: TDM-006
Last Reviewed: March 1, 2010

Link to Article: http://www.wave.com/support/documents/TDM/TDM-006.asp#