topic Decryption of a drive with the MBR damaged in Endpoint https://community.checkpoint.com/t5/Endpoint/Decryption-of-a-drive-with-the-MBR-damaged/m-p/22267#M490 <HTML><HEAD></HEAD><BODY><P>Situation:<BR />A laptop is encrypted, the OS crashed, in system repair the fixmbr and fixboot command was ran.</P><P><BR />Consequince:</P><P>The preboot authentication doesn't load.</P><P></P><P>Actions taken:</P><P>The decryption has been tried with a recovery media but no volume was found.<BR />DMU tool fails to decrypt with the message "Can't find system area, try using&nbsp;recovery file instead"</P><P>Loading the recovery file in DMU gives the authentication window for the selected drive but after authenticating nothing happens. The drive isn't accessible.</P><P></P><P>What else can be done to recover the data from the drive?</P></BODY></HTML> Mon, 27 Aug 2018 16:53:44 GMT IT_Selgros 2018-08-27T16:53:44Z Decryption of a drive with the MBR damaged https://community.checkpoint.com/t5/Endpoint/Decryption-of-a-drive-with-the-MBR-damaged/m-p/22267#M490 <HTML><HEAD></HEAD><BODY><P>Situation:<BR />A laptop is encrypted, the OS crashed, in system repair the fixmbr and fixboot command was ran.</P><P><BR />Consequince:</P><P>The preboot authentication doesn't load.</P><P></P><P>Actions taken:</P><P>The decryption has been tried with a recovery media but no volume was found.<BR />DMU tool fails to decrypt with the message "Can't find system area, try using&nbsp;recovery file instead"</P><P>Loading the recovery file in DMU gives the authentication window for the selected drive but after authenticating nothing happens. The drive isn't accessible.</P><P></P><P>What else can be done to recover the data from the drive?</P></BODY></HTML> Mon, 27 Aug 2018 16:53:44 GMT https://community.checkpoint.com/t5/Endpoint/Decryption-of-a-drive-with-the-MBR-damaged/m-p/22267#M490 IT_Selgros 2018-08-27T16:53:44Z Re: Decryption of a drive with the MBR damaged https://community.checkpoint.com/t5/Endpoint/Decryption-of-a-drive-with-the-MBR-damaged/m-p/22268#M491 <HTML><HEAD></HEAD><BODY><P>You may want to open a case with TAC for this to see if they can do anything with recovering the drive but from my experience, we have lost the data on the drive whenever they crash and cannot be seen in the DMU.&nbsp; I have had some luck on failing drives being able to be recovered using the DMU, but never the completely failed ones.&nbsp;</P></BODY></HTML> Mon, 27 Aug 2018 17:45:00 GMT https://community.checkpoint.com/t5/Endpoint/Decryption-of-a-drive-with-the-MBR-damaged/m-p/22268#M491 Steve_Lander 2018-08-27T17:45:00Z Re: Decryption of a drive with the MBR damaged https://community.checkpoint.com/t5/Endpoint/Decryption-of-a-drive-with-the-MBR-damaged/m-p/251283#M10609 <P><a href="https://community.checkpoint.com/t5/user/viewprofilepage/user-id/1322">@IT_Selgros</a>Were you able to resolve this issue? I'm having a similar problem.&nbsp;</P> Sun, 15 Jun 2025 16:18:38 GMT https://community.checkpoint.com/t5/Endpoint/Decryption-of-a-drive-with-the-MBR-damaged/m-p/251283#M10609 Valerio5286 2025-06-15T16:18:38Z