Solved

Decrypt bitlocker files using key

Posted on 2013-06-03
16
44 Views
Last Modified: 2016-07-07
I saved a few files from an encrypted laptop to an external drive. I am now trying to access the files but am getting an access denied error. I have the unlock key but am not sure how to proceed.

The laptop has been decrypted and the drive was formatted so this is the only copy of the files that I have.

Any help would be greatly appreciated.
0
Comment
Question by:arnier13
  • 7
  • 4
  • 2
  • +1
16 Comments
 
LVL 23

Expert Comment

by:Eirman
ID: 39218619
Have you got Ultimate or Enterprise edition of Windows 7 ... they are the only ones that support bitlocker

The latter part of this article might help (XP solution) ....
http://tweaks.com/windows/39428/encrypt-removable-usb-flash-drives-with-bitlocker/
ditto...
http://windowsitpro.com/security/q-can-i-open-files-are-stored-bitlocker-protected-usb-drive-my-windows-xp-or-windows-vista-


Useful info and links here .....
http://www.brighthub.com/computing/smb-security/articles/1453.aspx
0
 
LVL 53

Expert Comment

by:McKnife
ID: 39218656
As I told you in your other thread: bitlocker CANNOT encrypt single files. So it is impossible that those files you are talking about are encrypted using bitlocker.
The access denial must have another reasonm.

Please explain.
0
 

Author Comment

by:arnier13
ID: 39219005
I understant that bitlocker does not encrypt single files. We used it to encryt the entire drive. I created some files on the laptop and moved them to an external hard drive. When I look at the files in the external drive they are encrypted and I get an access denied error when trying to open them.
0
 
LVL 53

Expert Comment

by:McKnife
ID: 39219029
> When I look at the files in the external drive they are encrypted and...
Who/what tells you they are encrypted? Access Denials have nothing to do with encryption.
0
 

Author Comment

by:arnier13
ID: 39219035
The file names are green
0
 

Author Comment

by:arnier13
ID: 39219382
Could it be that I transferred the files from the encrypted drive to another encrypted drive?
0
 
LVL 53

Expert Comment

by:McKnife
ID: 39219534
Green means efs encrypted, not bitlocker.
0
Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

 

Author Comment

by:arnier13
ID: 39219762
I transfered the file to an encrypted hard drive. Could that be the issue?
0
 
LVL 53

Accepted Solution

by:
McKnife earned 500 total points
ID: 39219804
No, the files are visible, that tells you the drive is accessible. The files themselves are EFS encrypted, that's why they are shown in green and that makes them inaccessible. You need to do the EFS recovery, like shown here: http://technet.microsoft.com/en-us/library/cc722672.aspx
0
 
LVL 53

Expert Comment

by:McKnife
ID: 39254660
Time for feedback :)
0
 
LVL 38

Expert Comment

by:Rich Rumble
ID: 39310222
Agreed with McKnife, BL encrypts the whole drive, it's a FileSystem encryption and the data is either visiable or not, locked or unlocked. EFS is a file/folder level encryption and they are typically visible at any time. I recommend AEFSDR from elcomsoft or PassWare's recovery suite. If you didn't save the certificates from that drive, or an "undelete" utility can't locate them, you will not recover the files. BL can also encrypt USB drives, and again it's the whole drive or partition that is encrypted not just a few files.
-rich
0
 
LVL 53

Expert Comment

by:McKnife
ID: 41690989
Efs recovery, as outlined in https:#a39219804 would normally solve it, otherwise, cracking, as suggested in https:#a39310222 as last option.
0
 
LVL 53

Expert Comment

by:McKnife
ID: 41690992
Forgot to object.
0
 
LVL 38

Expert Comment

by:Rich Rumble
ID: 41693042
Agreed and object as well.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There are many reasons malware will stay around and continue to grow as a business.  The biggest reason is the expanding customer base.  More than 40% of people who are infected with ransomware, pay the ransom.  That makes ransomware a multi-million…
Explore the encryption capabilities built into Google Apps and how these features can help you meet privacy policy and regulatory compliance, but are not a full solution. Understand and compare the most popular email encryption services for Google A…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

861 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now