SafeGuard Easy multi-platform 4.5x
Windows 2000 Professional, Windows XP
Windows 2000, Windows 2003 Standard Edition
Is it possible to create images of SafeGuard Easy secured systems?
Imaging of SafeGuard Easy encrypted Systems is possible but some conditions must be fulfilled.
The imaging tool in use should be able to create a sector based image. Since tools, creating images out of Windows are usually unable to create sector based images; this variant is not supported.
All imaging types that exclude the partition on which the SGE kernel is placed will work, in principle. This implies that a Disk to Disk image of the first hard disk is not possible, as it contains the partition that holds the kernel.
The SafeGuard Easy kernel must be placed on a partition that shall not be imaged or dumped, using the automated (unattended) installation capabilities of SafeGuard Easy
For SafeGuard Easy Versions 4.5x
Refer to chapter 4.4.2 of the SafeGuard Easy manual and in particular to the description of the parameter KERNELDRV
Except for the partition, on which the SafeGuard Easy kernel is stored, all partitions can be dumped or loaded.
To be able to perform a partition dump or partition load, a boot floppy should be placed in the drive, after system start, but before authenticating to the SafeGuard Easy Pre Boot Authentication (PBA), so the system will boot from floppy after PBA (Make sure you have the appropriate right to start from floppy after PBA).
Starting the imaging tool after PBA allows the data to be read in plain and copied into the image file. Make sure the imaging tools uses Int 0x13 to access the hard disk! This has the advantage that the imaging tool will be able to compress the data.
The security of the image files depends on the encryption status of the destination partition. If it is encrypted, same applies as for any other data stored on partitions encrypted using SafeGuard Easy.