Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have a corporate laptop with a slow 5400 rpm C: drive, and I want to clone the drive to an SSD drive to improve performance on the laptop. The plan is to replace the original drive with the new SSD inside the laptop. However the original drive is encrypted using McAfee Endpoint Encryption 6.1. So I need to do a raw partition copy (bit-by-bit) of the encrypted partition(s) for any hope of this to work.

The operating system is Windows 7 Enterprise 64 bit. I have access to the laptop, meaning I can boot inside the Windows 7 OS, log into Windows as a user, and even install software. However I am not capable of decrypting the drive.

These are the stats on the source drive (spinning) and the new target drive (ssd).

Original Source Drive (spinning 5400 rpm drive):
Physical Size:  300 GB
Partition 1:  100 MB 
Partition 2:  102 GB (encrypted using McAfee)
Empty space:  197 GB


New Target Drive (OCZ Agility 3 SSD):
Physical Size: 240 GB
Empty Space: 240 GB

I tried booting from a recovery CD using Macrium Reflect version 5.0 to do a "Forensic Copy" of the encrypted partition, but the clone failed with no error explanation. The smaller partition 1 worked fine and cloned successfully since the smaller partition 1 is not encrypted, but the encrypted partition did not work. This product support thread said it should work, but I get the message clone failed when I try.

Is there another product which is more likely to be successful at cloning these partitions to the SSD? Is cloning an encrypted partition a bad idea, and should I simply avoid doing this? Has anyone successfully cloned a Win 7 partition which is encrypted with McAfee Endpoint Encryption v6.1?

share|improve this question

1 Answer 1

up vote 2 down vote accepted

I work with thousands of McAfee endpoint encryption computers both Mac and PC. Without having access to the EPO server or the EETech tools or user XML recovery file, you are out of luck. Any modification to the encrypted MBR or PreBoot file system will break the ability for it to boot into the OS. This is intentional. Without the tools, you cannot decrypt it.

If you can still boot into the OS on the encrypted disk, do so. Then move all the data to somewhere else and reformat the drive.

share|improve this answer
    
Ok thanks. It was typical corporate IT not motivated to help someone install an SSD on their corporate laptop. We ended up just bypassing the corporate laptop with a personal one. The corporate laptop sits on the shelf at home with a KVM over IP for remote access. User only uses the corporate laptop when absolutely necessary now by remoting in using the KVM over IP. It's a real shame when laziness causes good hardware to go unused. –  steampowered Aug 22 '12 at 20:14

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.