SafeGuard Full Disk Encryption: Recovery options per encryption method

  • Article ID: 120440
  • Updated: 20 Oct 2014


SafeGuard Full Disk Encryption: Recovery options per encryption method/platform

First seen in

Sophos SafeGuard Disk Encryption for Mac 6.10
SafeGuard BitLocker Client 6.10.0
SafeGuard  Device Encryption 6.10.0


What To Do

 The available disaster recovery options vary depending on the Full Disk encryption method and platform which was chosen. 

Recovery Option Sophos VBE
BitLocker legacy BitLocker C/R FileVault2
managed by SGN


yes (RecoveryKeys.exe) MS built-in recovery options no no
Slaving of encrypted drive yes (requires key assignment in MC) yes no Target Disk mode
no no yes no
Challenge/Response  yes Recovery Key can be displayed in the MC yes Recovery key can be displayed in the MC
BitLocker recovery options that require the possession of the BitLocker recovery key  no yes no* no

* This affects for example scenarios like:

- The encrypted harddrive has been transferred to another computer because of a hardware defect (e.g. a power supply or mainboard problem)

- The Operating System does not boot anymore and needs to be repaired e.g. using the built-in Startup Repair in the Windows Recovery Environment.  


Related documentation / KBAs

KBA 120256 - Data Recovery: Slaving Bitlocker encrypted drives

KBA 108156 - SafeGuard Enterprise: Recovery scenarios for SafeGuard Disk Encryption

SafeGuard 6.10 Tools Guide  . Decribes how to use BLCRBackupRestoren.exe

Microsoft Bitlocker Recovery Guide

If you need more information or guidance, then please contact technical support.

Rate this article

Very poor Excellent