How to obtain the Key Check Value requested by the Re-associate key option

How to obtain the Key Check Value requested by the Re-associate key option


Environment

McAfee Drive Encryption (DE) 7.1

All supported ePolicy Orchestrator (ePO) releases

For details of DE supported environments, see KB79422.

Summary

​When you attempt to re-associate a key in ePO, you are prompted to type the Key Check Value. This value is obtained from the client when you use a DETech.

Solution

In DE 7.0 and later, the Export recovery information based on Disk Keycheck option allows you to export a recovery information file (.xml) by specifying the Key Check Value retrieved from an encrypted disk using DETech/ EETech. You are no longer required to check in the DETOOLS.zip/EETOOLS.zip as you were with earlier releases.

Obtain the Key Check Value from the client, then add that value in the ePO console.

Client: Use a DETech CD to obtain the Key Check Value.
  1. Create a bootable Recovery DETech CD. For instructions, see the DETech User Guide (PD24871)
  2. Start the client from the DETech CD.
  3. Navigate to the Disk information section to obtain the Key Check Value.

ePO console: 
To export the recovery key, click System Tree, Client, Actions, Drive Encryption, and select Export recovery information based on Disk Keycheck.

Workaround

Use scripting to obtain the recovery file based on the key check value. See scripting guides for the relevant version. 

NOTE: Scripting is currently not supported and involves the engagement of professional services.

    • Related Articles

    • How to uninstall and re-install McAfee Agent on a Mac

      Environment McAfee Agent (MA) 4.x, 5.x McAfee ePolicy Orchestrator (ePO) 5.x Apple Mac OS X 10.4.11 or later Summary This article describes how to uninstall and re-install MA on a Mac. Problem MA does not communicate with the ePO server, or has not ...

    • Your computer significantly slows down after you enable the Active Response File Hashing option

      Environment McAfee Active Response (MAR) 2.x Problem You enable the MAR File Hashing option on one of your clients, and it experiences a significant slowdown in operation and performance.  When you investigate, you see the MARService.exe process is ...

    • How to check and remove Bitlocker in windows 10 machine

      Please find the below link for manually disable the bitlocker http://users.isr.ist.utl.pt/~mbayat/hacks/how-to-remove-bitlocker-encryption-in-windows-10/

    • How to respond to a ransomware infection

      Environment McAfee Endpoint Security (ENS) Threat Prevention 10.x McAfee Host Intrusion Prevention (Host IPS) 8.0 McAfee VirusScan Enterprise (VSE) 8.8 Summary This article provides general guidance to first responders during a ransomware outbreak. ...

    • TIE POC Guide Final

      ​ ​ ​ Contents Introduction Purpose Deployment Requirements Optional Components Requirements/Pre-Requisites Installation and Configuration Checklist Installation and Configuration of McAfee Threat Intelligence Exchange (TIE) and Data Exchange Layer ...