Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

My hard drive had five partitions, including one some 4-5 GB BitLocker encrypted one. When I used Disk Management I could view two partitions (24.4 GB and 8.94 GB) in green colour labelled Empty space.

So, I wanted to merge them and I used MiniTool partition wizard for the purpose. I don't know what that software did, but all I was left with was two partitions and lots of green free space.

I recovered two partitions using EaseUS partition master, but the BitLocker encrypted partition cannot be searched by it, nor by MiniTool partition recovery.

Now, the Disk Management shows a free space partition and an unallocated partition, of 28.36 GB and 8.94 GB, respectively.  Here is a screenshot:

Disk Management

Please, tell me a way to recover the BitLocker-encrypted partition that is showing as a free space in Disk Management.

share|improve this question

BitLocker cannot be recovered without the certificate created with it, and the data currently in tact. That's part of their security.

share|improve this answer
    
So, wouldn't it work even if I have the recovery key?? – Atishay Jain May 27 '12 at 6:01
    
You would need an exact image of the data to apply the key to – Canadian Luke May 27 '12 at 7:16
    
Chances of recovery occur bleak now. Will Microsoft support be of some help? – Atishay Jain May 27 '12 at 13:03
2  
Just to tell you to backup next time, or don't touch partitions – Canadian Luke May 27 '12 at 17:25

The answer is M3 Bitlocker Recovery Free that is a commercial software. In the free version you can recover only 100MB of your lost data.

share|improve this answer

Assuming that only the volume header was lost (as opposed to the volume contents) you may be able to reconstruct the volume. The critical info, the actual BL headers, isn't stored at the start of the partition. However, the offsets of those BL headers (they are replicated a few times) are stored in the volume header. You'll need to find them again in order to reconstruct the header. Fortunately, they start with a distinctive "magic number" - the string -FVE-FS- that you can scan the partition for. You can try resurrecting your volume using the on-disk structure layout described here: https://github.com/Aorimn/dislocker/blob/master/src/metadata/metadata.h. Note that it's incomplete, so you may need to cross-reference with other BL drives to figure out the expected values. I was able to repair a damaged BL volume, with the help of this information, using a hex editor in a Linux LiveCD.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .