SafeGuard Full Disk Encryption: Recovery options per encryption method

  • Article ID: 120440
  • Rating:
  • 2 customers rated this article 1.5 out of 6
  • Updated: 15 Jan 2015


SafeGuard Full Disk Encryption: Recovery options per encryption method/platform

First seen in
Sophos SafeGuard Disk Encryption for Mac 6.10
SafeGuard BitLocker Client 6.10.0
SafeGuard  Device Encryption 6.10.0


What To Do

 The available disaster recovery options vary depending on the Full Disk encryption method and platform which was chosen. 

Recovery Option Sophos VBE
BitLocker legacy BitLocker C/R FileVault2
managed by SGN


yes (RecoveryKeys.exe) MS built-in recovery options no no
Slaving of encrypted drive yes (requires key assignment in MC) yes no Target Disk mode
no no yes no
Challenge/Response  yes Recovery Key can be displayed in the MC yes Recovery key can be displayed in the MC
BitLocker recovery options that require the possession of the BitLocker recovery key  no yes yes* no

* Requires a SafeGuard Management Center version 7 (in version 6.1 exporting the recovery key for BitLocker C/R systems is not possible). The following Knowledge Base Article describes the necessary steps to export the BitLocker Recovery Key: KB121423 - Recovery of broken BitLocker Challenge/Response systems.


Related documentation / KBAs

KBA 120256 - Data Recovery: Slaving Bitlocker encrypted drives

KBA 108156 - SafeGuard Enterprise: Recovery scenarios for SafeGuard Disk Encryption

SafeGuard 6.10 Tools Guide  . Decribes how to use BLCRBackupRestoren.exe

Microsoft Bitlocker Recovery Guide

If you need more information or guidance, then please contact technical support.

Rate this article

Very poor Excellent