export recovery keys

[rbenson09]

is there another way to export recovery keys from a system no longer in ePO?

[jacek]

Yes, you can export recovery keys using keycheck: https://docs.mcafee.com/bundle/drive-encryption-7.2.0-product-guide-epolicy-orchestrator/page/GUID-E...

[rbenson09]

this looks like i would still need the system in ePO? the system cannot boot so an ASCI cannot occur

[jsubbura]

Hi @rbenson09 ,

This does not require machine to report to EPO.

You can build the DETech tool and boot the machine with the boot issue with the DETech tool and get the disk keycheck value. 

Reference Post below:

https://community.mcafee.com/t5/Encryption-EEM-Managed/0xEE120003-Unable-decrypt-ssd-with-token-or-f...

Thank you