- Products
- Learn
- Local User Groups
- Partners
-
More
Join Us for CPX 360
23-24 February 2021
Important certificate update to CloudGuard Controller, CME,
and Azure HA Security Gateways
How to Remediate Endpoint & VPN
Issues (in versions E81.10 or earlier)
IDC Spotlight -
Uplevel The SOC
Important! R80 and R80.10
End Of Support around the corner (May 2021)
Situation:
A laptop is encrypted, the OS crashed, in system repair the fixmbr and fixboot command was ran.
Consequince:
The preboot authentication doesn't load.
Actions taken:
The decryption has been tried with a recovery media but no volume was found.
DMU tool fails to decrypt with the message "Can't find system area, try using recovery file instead"
Loading the recovery file in DMU gives the authentication window for the selected drive but after authenticating nothing happens. The drive isn't accessible.
What else can be done to recover the data from the drive?
You may want to open a case with TAC for this to see if they can do anything with recovering the drive but from my experience, we have lost the data on the drive whenever they crash and cannot be seen in the DMU. I have had some luck on failing drives being able to be recovered using the DMU, but never the completely failed ones.
About CheckMates
Learn Check Point
Advanced Learning
WELCOME TO THE FUTURE OF CYBER SECURITY