This article provides instructions how to create a new Whole Disk Recovery Token when using PGP Encryption Desktop for Windows (Symantec Encryption Desktop)
Resolution
In PGP Encryption Server (Symantec Encryption Management Server) managed environments with the appropriate policy, Whole Disk Recovery Tokens (WDRTs) are created automatically when a disk, partition, or removable disk is whole disk encrypted. They are sent to the PGP Encryption Server managing security for the disk or partition when they are created.
WDRTs can be used to access the disk or partition in case the passphrase or authentication token is lost. Once a WDRT is used, it cannot be used again. A new WDRT must be generated for the system. All new WDRTs are also automatically sent to the PGP Encryption Server managing the disk when the new WDRT is created.
--disk specifies the disk to which the operation applies.
<number> is the disk number on the system.
--admin-authorization specifies that the command is being performed by a member of the WDE-ADMIN Active Directory group.
--admin-passphrase specifies that the passphrase of an authorized user on the encrypted disk will be used to authenticate the adding of the new user account.
<phrase> is the passphrase of an authorized user on the disk.
--recovery-token specifies that a recovery token (WDRT) will be created to replace the used one.
<string> is the WDRT string.
The command is performed at the command prompt by using the following for your operating system:
Windows XP
On your PC, click Start>Run
Type cmd in the text field and click OK
Change to the following directory: C:\Program Files\PGP Corporation\PGP Desktop
CD Program Files\PGP Corporation\PGP Desktop
Type pgpwde --new-wdrt --disk <number> --admin-authorization --admin-passphrase <phrase> --recovery-token <string> at the prompt and press Enter.
Windows Vista & Windows 7
Click Start.
In the Start Search field, type run and press Enter.
Click Run from the displayed Programs list.
Type cmd and click OK.
Change to the following directory: C:\Program Files\PGP Corporation\PGP Desktop
CD Program Files\PGP Corporation\PGP Desktop
Type pgpwde --new-wdrt --disk <number> --admin-authorization --admin-passphrase <phrase> --recovery-token <string> at the prompt and press Enter.