These instructions are now deprecated. With the relase of EEPC v6.2 McAfee officiallys upports building EE Tech Disks with WinPE 3. You can get the official documentation here: Endpoint Encryption for PC 6.2 EE Tech User Guide.

 

 

UPDATE: Support files for EEPC v6.1.2 are now attached. Only limited testing has been done with these, so please give it a try and report any problems in the comments. Thanks!

 

I put together a bare-bones set of instructions for using WinPE 3 (based on Windows 7) to build a bootable CD that contains McAfee EE Tech recovery tool for Endpoint Encryption for PC version 6.

 

These instructions assume that you have access to a set of files called "support files". These are files that are necessary to create an EE Tech disk. They are not organized in the product download, so we've organized them and put them in a zip file that is attached at the bottom of this post.

 

 

 

 

How to build an EE Tech recovery disk using WinPE 3

1. Install WAIK http://www.microsoft.com/downloads/en/details.aspx?familyid=696DD665-9F76-4177-A 811-39C26D3B3B34&displaylang=en

 

2. start > program files > deployment tools command prompt

The instructions below can be copied and pasted into the deployment tools command prompt. Do them one step at a time and you will finish with a built ISO. Simon Hunt has provided a batch file to automate the steps, but this document gives you a manual creation option.

 

3. Create a new WIM named winpe.wim

copype.cmd x86 c:\winpe

 

4. mount the new image

imagex /mountrw c:\winpe\winpe.wim 1 c:\winpe\mount

 

5. add other packages

Dism /image:c:\winpe\mount /Add-Package /PackagePath:"c:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\WinPE-HTA.cab"

Dism /image:c:\winpe\mount /Add-Package /PackagePath:"c:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\WinPE-MDAC.cab"

Dism /image:c:\winpe\mount /Add-Package /PackagePath:"c:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\WinPE-Scripting.cab"

Dism /image:c:\winpe\mount /Add-Package /PackagePath:"c:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\WinPE-WMI.cab"

 

6. Make two new directories. You can do this from the command line or through the Windows Explorer GUI.

\mount\Windows\system32\SafeBoot

\mount\Program Files\McAfee

 

 

7. Extract the support files to the root of C and use these commands to copy them to the mounted PE image. The MakePE6.02.zip file is attached to this post (below).

xcopy "C:\MakePECD3.02 EEPC6+W7\Support Files\Program Files" "c:\WINPE\mount\Program Files" /e /y /i

xcopy "C:\MakePECD3.02 EEPC6+W7\Support Files\Windows" "c:\WINPE\mount\Windows" /e /y /i

 

 

8. We also need to add a font

copy "%windir%\Fonts\cour*.*" "c:\WINPE\mount\Windows\fonts"

 

9. Make registry changes using the provided registry changes.reg file

reg load hklm\SafeBoot "c:\WINPE\mount\windows\system32\config\system"

reg import "c:\temp\registry changes.reg"

reg unload hklm\safeboot

 

10. Unmount the WIM

DISM /unmount-Wim /MountDir:"c:\winpe\mount" /Commit

 

11. Copy the WIM to the ISO directory

copy "c:\winpe\winpe.wim" "c:\winpe\ISO\sources\boot.wim"

 

 

12. Make the ISO

oscdimg -n -b"c:\winpe\etfsboot.com" "c:\winpe\iso" "c:\winpe\WinPE_EETech.iso"

 

 

Done! Now you just have to burn the ISO to a disk and start using it for recoveries.

 

Update: Extra step required for using the Remove EE function

After some testing in the field, we found a problem with the Remove EE function. If you enter valid authentication and authorization in EE Tech, clicking the Remove EE button would result in the application doing nothing. The status screen would make it look like the process started, but the progress bar wouldn't move and the hard disk light would show no activity. The problem is that Windows 7 PE environments bring the disk online. To resolve the situation, you must bring the disk offline prior to attempting to Remove EE. Please note that this is not required for other operations in EE Tech, but only for fully decrypting the disk and restoring the MBR (the actions done by clicking the Remove EE button). To bring the disk offline, you must use DiskPart. This is available natively in Windows 7 PE, so you simply have to launch the Windows command line and enter the following commands (example also shown in screenshot below):

 

diskpart

 

select disk 0

 

offline disk

 

EE Tech WinPE Offline Disk.png