Full Recovery with Recovery Media

Full Recovery with Recovery Media

Client computers send recovery files to the Endpoint Security Management Server so that you can create recovery media if necessary. After the recovery, the files are restored as decrypted, as they were before the Full Disk Encryption installation, and the operating system can run without the Pre-boot.

Full recovery with recovery media decrypts the failed disk and recovers the data. This takes more time than the time taken when you use the Full Disk Encryption Drive Slaving Utility. It lets you access data quickly.

Recovery Media:

  • Is a snapshot of a subset of the Full Disk Encryption database on the client.

  • Contains only the data required to do the recovery.

  • Updates if more volumes are encrypted or decrypted.

  • Removes only encryption from the disk and boot protection.

  • Does not remove Windows components.

  • Restores the original boot procedure.

Users must authenticate to the recovery media with a username and password. These are the options for the credentials to use:

  • Using SmartEndpoint - Users that are assigned to the computer and have the Allow use of recovery media permission can authenticate with their regular username and password. In SmartEndpoint, go to the OneCheck User Settings rule > Advanced > Default logon settings.

  • When you create the recovery media, you can create a temporary user who can authenticate to it. A user who has the credentials can authenticate to that recovery media. Users do not require Allow use of recovery media permission to use the recovery media. SmartCard users must use this option for recovery.

To perform full recovery with recovery media:

  1. In the Endpoint Web Management Platform, go to the Computer Management view > Full Disk Encryption Actions > Recovery> Full Disk Encryption Recovery.

    The Full Disk Encryption Recovery window opens.

  2. Search for the computer which you want to decrypt.

    The OS Name and OS version of the computer are displayed.

  3. User List - This list shows the users who have permission to use recovery media for the computer. There must be at least two users on the list to perform recovery.

    • If there are two users or more on the list, continue to the next step.

    • If there are less than two users on the list:

      1. Click the + sign to create a temporary users or temporary users who can use the recovery media.

      2. In the window that opens add a username and a password that the users will use to access the file.

  4. Download the recovery file.
  5. Create the recovery media.

    1. On the Endpoint Security client, go to folder: C:\Program Files(x86)\CheckPoint\Endpoint Security\Full Disk Encryption\

    2. Double-click UseRec.exe to start the external recovery media tool.
    3. Follow instructions in the tool to create the recovery media.
Note:

During the decryption process, the client cannot run other programs