Data Recovery: Accessing BitLocker encrypted drive(s) from a bootable media (e.g. Windows installation media)

  • Article ID: 120833
  • Rating:
  • 3 customers rated this article 6.0 out of 6
  • Updated: 23 Jun 2014

Issue

This article describes how to access BitLocker encrypted drive(s) by booting up the machine from windows installation media. The required BitLocker recovery key can be obtained from the SafeGuard Management Center.

Note: This procedure does not apply to BitLocker Challenge/Response installations.

First seen in

SafeGuard BitLocker Client 6.10.0
SafeGuard BitLocker Client 6.00.1

Operating systems
Windows 7, 8, 8.1

What To Do

Accessing a Windows 7 machine that was encrypted with the SafeGuard Enterprise BitLocker Client

Accessing a Windows 8 / 8.1 machine that was encrypted with the SafeGuard Enterprise BitLocker Client 

 

Accessing a Windows 7 machine that was encrypted with the SafeGuard Enterprise BitLocker Client

Insert the Windows 7 installation media (or a custom recovery media that is able to unlock BitLocker protected drives) and boot the machine directly from the media:

Select "Repair your computer"

 

The  BitLocker Drive Encryption Recovery assistant will start up automatically once an encrypted drive was found. Select "Manually input the key" and press "Next":

 

 

Open the SafeGuard Enterprise Management Center and start the Recovery assistant (Tools | Recovery...). Look for the machine that you booted with the Windows installation media and press "Next". When selecting a volume, select "Boot volume" and press next again. The SafeGuard Enterprise Recovery Wizard will then display the BitLocker Recovery Key for the "Boot Volume"of the client:

 

 

Enter the Recovery Key in the BitLocker Drive Encryption Recovery assistant and click "Next":

 

The drive is now temporarily unlocked and can be accessed from the command line or any other application located on the media.

Back to top.

 

 

 

Accessing a Windows 8 / 8.1 machine that was encrypted with the SafeGuard Enterprise BitLocker Client

Insert the Windows 8 / 8.1 installation media (or a custom recovery media that is able to unlock BitLocker protected drives) and boot the machine directly from the media.

Select "Repair your computer"

 

 

From the "Choose an option" screen, click "Troubleshoot" to continue:

 

 

From the "Troubleshoot" screen, click on "Advanced options" to continue:

 

From the "Advanced options" screen, click on "Command Prompt" to continue:

 

 

From the "Command Prompt" screen, click on "Enter your recovery key" to continue:

 

 

Open the SafeGuard Enterprise Management Center and start the Recovery assistant (Tools | Recovery...). Look for the machine that you booted with the Windows installation media and press "Next". When selecting a volume, select "Boot volume" and press next again. The SafeGuard Enterprise Recovery Wizard will then display the BitLocker Recovery Key for the "Boot Volume"of the client:

  

 

On the Windows 8 / 8.1 client machine, enter the Recovery Key when prompted and click "Continue":

 

 

The drive is now temporarily unlocked and can be accessed from the command line or any other application located on the media.

Back to top.


 
If you need more information or guidance, then please contact technical support.

Rate this article

Very poor Excellent

Comments