Administrator Guide

Policy-Based or File/Folder Encryption Recovery
With Policy-Based Encryption or File/Folder Encryption (FFE) recovery, you can recover access to the following:
A computer that does not boot and that displays a prompt to perform SDE Recovery.
A computer on which you cannot access encrypted data or edit policies.
A server running Dell Data Protection | Server Encryption that meets either of the preceding conditions.
A computer on which the Hardware Crypto Accelerator card or the motherboard/TPM must be replaced.
Overview of the Recovery Process
To recover a failed system:
1 Burn the recovery environment onto a CD/DVD or create a bootable USB. See Appendix A - Burning the Recovery Environment.
2 Obtain the Recovery le.
3 Perform the recovery.
Perform Policy-Based Encryption or FFE Recovery
Follow these steps to perform Policy-Based Encryption or FFE recovery.
Obtain the Recovery File - Remotely Managed Computer
To download the <machinename_domain.com>.exe le:
1 Open the Remote Management Console and, from the left pane, select Management > Recover Endpoint.
2 In the Hostname eld, enter the fully qualied domain name of the endpoint and click Search.
3 In the Enhanced Recovery window, enter a recovery Password and click Download.
2
6 Dell Data Protection Recovery Guide
Policy-Based or File/Folder Encryption Recovery