Sunday, January 01, 2012

Windows XP Preinstallation Environment (PE) for PGP Whole Disk Encryption

Tools

Necessary Files 
  • Create a new folder as c:\wde and copy the following files to it from a PGP install:

C:\Program Files\PGP Corporation\PGP Desktop\pgpbootb.bin
C:\Program Files\PGP Corporation\PGP Desktop\pgpbootg.bin
C:\Program Files\PGP Corporation\PGP Desktop\PGPwde.exe
C:\Program Files\PGP Corporation\PGP Desktop\Stage1
C:\Windows\system32\PGPsdk.dll
C:\Windows\system32\pgpsdkNL.dll
C:\Windows\system32\PGPwd.dll
C:\Windows\system32\drivers\PGPwded.sys

  • Copy etfsboot.com from “C:\Program Files\Windows AIK\Tools\PETools\x86\boot” to “C:\pebuilder3110a.”
Procedure 
  1. Open PE Builder, insert a Windows XP SP2/3 CD, set the Media Output to “None,” and build a basic PE. For the purposes of this documentation  the default path of “c:\pebuilder3110a\BartPE” is used.
  2. Open a command prompt and navigate to where you extracted the PGP PE. Type the following: pgppe.exe /winpe c:\pebuilder3110a\BartPE c:\wde
  3. Navigate to “C:\Program Files\Windows AIK\Tools\x86” via command prompt and type the following: oscdimg –bc:\pebuilder3110a\BartPE\bootsect.bin –n c:\pebuilder3110a\BartPE c:\bartpe.iso
  4. Burn the bartpe.iso to CD and you can now boot to it and use the pgpwde.exe application from the command prompt.
Commands 
  • Drive Info: pgpwde --enum
  • Drive Status: pgpwde --status
  • Show users: pgpwde --list-users –d
  • Decrypt: pgpwde --decrypt -d --p    
    or: pgpwde --decrypt --all -p
  • Unlock disk to access files: pgpwde --auth -d -p
Additional Resources 


 

Last modified on Friday, September 28, 2012