Exporting the recovery information is an optional step. In most recoveries, the administrator can authenticate by simply entering their credentials (or other token data). However, if the PBFS has become corrupted, it might be impossible to authenticate a user via password or other token in DETech because the data files containing the user's token data are corrupted.
In this case, Drive Encryption makes it possible to export the system's recovery data to a plain-text file, allowing it to be taken to the affected system, and then used to authenticate the system without DETech needing to access the PBFS.
Note
The recovery file contains secret data that allows access to the encrypted system; it must be handled securely and shredded from the file system where it is placed once the recovery operation has been completed.
Perform this task to export the recovery information file for the system from ePO - On-prem. There is a recovery information file in ePO - On-prem for all clients where encryption is active. This file can be used to authenticate the system in DETech. For more information, see the Drive Encryptionsystem recovery section in the Drive Encryption Product Guide.
For details about product features, usage, and best practices, click ? or Help.
Insert a removable media, such as a USB memory stick, to the system where ePO - On-prem is installed.
From the ePO - On-prem console, click → → to open the Systems page, then select the group from the System Tree pane.
Select the system, then click → → to open the Export Recovery Information confirmation page.
Click Yes to export the recovery information file. The Export Recovery Information page lists the Export information (.xml) file.
Right-click the .xml file and save it to the inserted removable media.
Note
The recovery information file has the general format of the client system name (.xml). Make sure to handle the file securely and shred (not just delete) the file once recovery is completed.