We are testing the EEMAC product in our environment and we cannot seem to find the correct way to pull data from an encrypted Mac. What tools are required to pull this data? We are able to use the WinPE cd to boot a Windows platform and provide the xml file and code of the day to recover the files. Is there a different cd to use for the Mac platform? Any help would be of great help before we roll this out.
You will need to download the EETech for Mac. It includes the EFI bios. Format a USB drive with Mac file system and copy the EFI file to it. You will need to disable to preboot screen and enable preboot USB support in the policy. Once you get in you can Authorize and Authenticate.
As of now there no tool similar WinPE available for Mac platform. you have to use EETech for Mac on USB to decrypt/revmove EEMac , etc on mac.