ZENworks Full Disk Encryption supports the use of a Windows PE emergency recovery disk to regain access to encrypted devices. Creating a Windows PE disk is an extensive command-line activity that requires the entry of more than 30 commands to create the correct directory structure and add the appropriate registry entries.
The Windows Powershell script automates the creation of the Windows PE emergency recovery disk, reducing the time required to create the disk and eliminating possible mistakes.
The result of the script is a Windows PE ISO image that you can burn to a CD or DVD.
If you don't include the ERI files on the disk, you can supply the files via a USB device at the time the disk is used for recovery.
|$BuildDir||C:\WinPE||The build directory used to create the Windows PE ISO image.|
|$Architecture||x86||Always use x86. The x86 settings works for both 32-bit and 64-bit processors.|
|$Language||en-us||The user locale. Values are standard international language code formats (en-us, de-de, es-es, and so forth). |
|$KbLayout||0409:00000409||The keyboard layout. The default is en-us. See the Microsoft Go Global Development Center (http://msdn.microsoft.com/en-us/goglobal/bb895996) for layout Ids.|
|$WAIKInstallation||C:\Program Files\Windows AIK||The path to the Windows AIK installation.|
|$ISOLabel||Novell_FDE_Recovery_WinPE||The volume label assigned to the ISO image.|
|$PluginDir||.\WinPE\EN\files||The path to the Full Disk Encryption plugin files. The default uses a relative path from the perspective of the script location.|
|$ERI_Dir||.\ERI||The path to the emergency recovery information (ERI) files to include in the ISO image. The default uses a relative path from the perspective of the script location.|
If the Execution Policy is set to Restricted, the script will not run and the following error will be displayed:
File Build_FDE_WinPE_recovery_disk_x86.ps1 cannot be loaded because the execution of scripts is disabled on this system. Please see "get-help about_signing" for more details.
At line:1 char:40
CategoryInfo : NotSpecified: (:) , PSSecurityException
FullyQualifiedErrorId : RuntimeException
After the script successfully completes, the Novell_FDE_Recovery_WinPE.iso is added to the C:\WinPE directory.
For information about using the Win PE disk to recover an encrypted device, see the ZENworks 11 Full Disk Encryption Emergency Recovery Reference