How to recover a Mac self-encrypting drive under SecureDoc
The instructions are more involved than the typical Windows SED (HWEMGR) recovery, but the idea is the same.
If SecureDoc is still present at pre-boot you can remove it using the SES option to "Export Hardware Encryption Data”.
This will only work if the original drives recovery information exists in the SES.
If the client organization does not have the original hardware encryption information in SES, they will probably have to send the drive back to Seagate to have it unlocked.
How to use HWE manager for a Mac device
A) If you don’t have SecureDoc installed on the Mac:
From any Mac OS device, open Terminal and run the following commands (detailed instructions can be found in the Mac user manual on page number 105):
1) diskutil unmountDisk /dev/disk1
Disk1 would be your USB media. To verify, you can type the command mount which will list current disks.
2) dd if=sdemgdsk.dmg of=/dev/disk1
"if” refers to the image file location.
B) If you have SecureDoc installed on the Mac (this option is easier):
1. Create USB Emergency Disk (from client machine) using SDPin recovery options.
2. Upon successful creation of USB recovery media, you will see two partitions. On the SES use the option to "Export Hardware Encryption Data” and copy the DBK and ENC files to the root of the SDFAT partition.
3. Plug the USB media into the Mac device with the problematic SED drive and power it on.
4. Hold the ALT button when the Mac O/S loads and you will be prompted to select the device to boot from. Select our USB Media.
5. Type Yes to run the SecureDoc Recovery tool
6. You will now see the following options:
6.1) Print SED device info
Device Model
Drive serial number : Hard-drive serial number
Drive firmware Revision: FDE drive firmware version number
Drive Flags/state: Tells you the status of the drive at this point
6.2) Print help instructions on how to execute management tool commands.
6.3) Quit the management tool.
6.4) Decrypt SED device – The FDE card will be unlocked.
Note: This command does not remove data from the drive and does not uninstall SecureDoc software from the Mac OS. It will allow you to now recover data from the drive and then re-image it for a fresh deployment.
6.5) Crypto-erase SED device – The FDE card will be unlocked and all data will be wiped from the drive. The drive will be returned to its factory state.
7. Select option 4 or 5 depending on your requirements.
Custom Fields
• Version: Affects all versions of SD