If a machine fails to load Windows or Encryption Desktop Drive Encryption bootguard (pre-boot) fails to load, you will need to decrypt the drive.
The recommended method of recovering an encrypted drive is to create Windows 10 WinPE recovery media because it boots to a command prompt and allows you to run PGPwde.exe, the Drive Encryption command line tool. Using the command line tool you can, for example, authenticate to the drive and copy important files from it.
If you do not have access to the WinPE recovery media, you can create bootable USB media.
The Encryption Desktop Recovery Disk has the same functionality as the bootable USB media but it is extremely slow for decrypting a drive. The rate of decryption is approximately 9 GB per hour which means it will take about 28 hours to decrypt a 250 GB drive. Please therefore only use it to decrypt a drive as a last resort. The bootable USB media or Drive Encryption command line tool will decrypt a disk many times faster than the Recovery Disk.
The Recovery Disk can only be used on machines running legacy BIOS (not UEFI). To determine if you are using Legacy BIOS, run msinfo32 or click on Control Panel / System and Security / Administrative Tools / System Information. In System Summary, check that the value of BIOS Mode is Legacy.
The Recovery Disk allows you to do the following:
Note that if a machine can already load bootguard but you cannot authenticate, it is unlikely that the Recovery Disk will be of any help.
Symantec Encryption Desktop Drive Encryption 10.4 and above for Windows.
To create the Recovery Disk simply locate the bootg.iso file on a machine that is running the same release of Encryption Desktop as the machine that has problems and burn the ISO to optical media. In Windows 10, do this by right clicking on the file and choosing Burn disc image.
To use the Recovery Disk, please do the following:
This is the Recovery Disk screen after successful authentication:
If you do not have access to a machine that is running the same release of Encryption Desktop as the machine that has problems, the Recovery Disk ISO files for release 10.4 and above are attached to this article.