Recover Deleted Machine from ePO

[snoobie]

Hi All,

I may be overlooking something simple but i have a machine that was deleted from ePO 5.1 and it was encrypted using MDE.

Can this be recovered?

Thanks in advance

[mitch_reid]

Hi,

When the machine syncs it should re-populate into ePO.  That's assuming that the "Remove agent on next agent-to-server communication" wasn't checked. If that was checked you need to re-install the McAfee agent.

[snoobie]

Hey,

So the encryption keys will still be there for the machine?

[pwalski]

snoobie,

I had a test system that I shutdown and deleted from the epo system tree. I powered it back on, and did a full wake up and it would appear that it did import the recovery key information. So that at least is promising.

[jhall2 · Accepted solution]

The keys are never deleted from the database. They can be exported using the Disk Keycheck which can be found by using DETech and selecting "Disk Information".