If an encrypted EPO managed machine gets deleted out of EPO by mistake, how do we export the disk encryption recovery key from EPO? Can we find it in a database somewhere to get it?
The laptop lost it's PBR somehow, so we need to boot off of EETech and need the recovery key from EPO to perform an emergency boot.Message was edited by: rmnetops on 6/25/12 1:13:16 PM CDT
You can use the API to export a key given the keycheck value (from the disk information), and also I think this may be available via EEGo. Best thing would be to contact your platinum support team and ask for help.
It's not usually needed - as if you reactivate MA on the machine, it will connect back to the key and recreate itself. It's only if you delete the machine while it's offline, and then need the key after breaking it, or forgetting the password.
I think EEGo lets you do this from within EPO though.
i know this Probelm. The machine is deleted in epo, the client is broken and you can not read the keycheck value.
To provide this i do follow - if you delete a machin form epo ihe xml-recovery-key is not deletet. The Problem is you must know the leaf-nodeID from the client was stored befor it was deleted. If you know this it is possible (for example for a sql-backup) to export the key.
To provide this for future i do a daily export form the leafnodeID and the assiged hostname to a textfile. so i can search for the ID form deletet machines and export.
I need this function 5-10 times in the last years....