SafeGuard Disk Encryption (SDE): how to create a BartPE CD

When you cannot use the PBA to authenticate and log in to the computer, and you need to access important data, you can create a Windows XP-based CD running BartPE (a third-party freeware tool) that will allow you to log in to the computer to view and copy the files that you need.

If you suspect that Windows is corrupt, read our SDE Recovery Guide for more information about performing this procedure.

Note: you will only be able to view encrypted files on Windows XP computers only.

To create a bootable CD using BartPE Builder

Prepare the PC and the Windows installation files

1. On the computer where you will assemble the necessary files and burn the CD, open Windows Explorer and, from the Tools menu, select Folder Options, and then click the View tab.
2. Enable 'Display the contents of system folders'.
3. Locate your Windows XP installation disc or a central installation location on your network.

   Download the PEBuilder and SDE software

4. Download the BartPE Builder self-extracting .exe file from http://www.nu2.nu/pebuilder/.
5. Download the Sophos Endpoint Security and Data Protection installation package from: https://secure.sophos.com/support/updates/encryption.html (full version)
   https://secure.sophos.com/support/updates/encryption-evaluation.html (trial version).

   Extract the SDE drivers from the SDE installation package

6. Double-click the SDE installation file to start the installation wizard. If you change the default location for the extraction, make a note of where the installer is extracting its files. When the Sophos SafeGuard Disk Encryption installer begins, click Cancel.
7. Navigate to the SDE installation folder (the default is C:\sde_46_x) and open the Tools folder.
8. Extract the contents of the SDE_BARTPE.zip folder.

   Install Bart PE Builder

9. Double-click the PEBuilder installation file to start the installation program -- if you change the default location, make a note of where you installed the files to. Don't launch PEBuilder at the end of the wizard.
10. Navigate to the PEBuilder folders (default is C:\pebuilder3110a) and open the plugin folder. Leave this folder open.

    Copy the SDE drivers (and eSATA hard disk drivers, if necessary) to the PE Builder folder

11. Open the SDE_BartPE folder and copy the SDE subfolder to the PE Builder plugins folder that you left open in step 10. If you are using an eSATA hard disk and you have the drivers for the hard disk, copy them into the SDE folder within the PE Builder plugin folder.

    Create a boot disc with PEBuilder

12. Run BartPE Builder.
13. Allow the program to search for your windows installation files (if it asks you to) -- if you do not have these files available, insert the computer's Windows XP installation disc into the CD/DVD drive.
14. When the PEBuilder window opens, if the program hasn't found the Windows XP installation files, ensure that the 'Source' field lists the drive letter where your Windows system installation files are located.
15. In the 'Output' field, type a name for the .iso file, if you are creating an iso file.
16. You can check whether the SDE files (and hard disk driver files, if applicable) have been copied to the correct folder by clicking the plugins button.
17. Burn the CD or DVD.

Now use the CD/DVD to view and copy files from your encrypted hard disk as described in Sophos SafeGuard Disk Encryption (SDE): recovery guide.

For more information about BartPE, please visit the BartPE website: http://www.nu2.nu/pebuilder/.