This content has been marked as final. Show 6 replies
Which version of "SafeBoot" I guess it must be v3.2 as that's the last time that name was used for the product? grin If it is v3/4, then you're out of luck as neither version supports partition movement. You could try a manual decryption I guess but it's not a supported situation.
I guess you must have toasted the MBR as the same time - strange as partition moving software doesnt usually mess with the MBR code, it should just change the partition tables.
If it's v5, doing an emergency boot should fix the problem as long as certain files didn't get moved about. V5 supports partition movements as long as the files in the root of C: don't get moved (which is normally impossible to do anyway).
Thanks for the response, greatly appreciated :)
I think it was version 3 or 4 as the most current version had issues being installed.
Any pointers on performing a manual decryption or any ideas where there may be a how to? :confused:
I have EnCase forensic edition with the SafeBoot decryption plugin at my disposal so I may give that a try tomorrow if the manual decryption is a no go... thing is I'm guessing that may look for a valid MBR...
your MBR is valid, it's just a normal MBR rather than a SafeBoot MBR.
your internal helpdesk should be able to decrypt the machine for you - we train pretty much every customer how do do it. Failing that, they can raise a ticket with McAfee support and they will walk the helpdesk through the decryption. If you are an end user, it's not something you can do on your own.
For the EnCase plugin you're going to need your machine key. Again, unless you're a SafeBoot administrator you're going to need their help to get that anyway. Encase won't let you decrypt the drive, it will just let you inspect the data on it.
Okay many thanks.
The IT dept told me earlier that all they could probably do is reformat the drive so I'll tell them what you've said etc.
I'll also get the machine key for the PC re the EnCase plugin and will take an image of the HD before giving to the IT helpdesk as that way I'll at least be able to get some of my old data off the drive if all else fails!
Encase can't give you the machine key - only the SafeBoot Administrator can do that. You have to give the key to encase, not the other way around.
Yep sorry I didn't explain my intentions very well.
Thanks for your help.