Full Disk Encryption Recovery Methods

Once a Full Disk Encryption device is fully encrypted, scenarios may exist where you must perform system restoration actions such as recovering a lost Local Administrator password or fixing corrupted Windows environment.

Important

Decrypt the drive before preforming recovery actions. For software encryption, standard data recovery tools (Windows Recovery Disk, ERD Commander, UBCD) cannot access a Full Disk Encryption 5.0 Patch 3 or higher encrypted device.

Data recovery methods are available to Endpoint Encryption Administrator and Authenticator accounts to recover data when the Full Disk Encryption device is not properly functioning.

Note

To decrypt the Full Disk Encryption device, the user must have Endpoint Encryption Enterprise or Group Administrator rights. To allow all users in a group/policy to access the recovery console, enable the following policy:

Management Console	Menu Path
PolicyServer MMC	Go to Full Disk Encryption → Agent → Allow User Recovery.
Control Manager	Create or edit a policy, then go to Full Disk Encryption → Users are allowed to access system recovery utilities.

$('#title').html($('meta[name=description]').attr('content'));