Start a Conversation

This post is more than 5 years old

Solved!

Go to Solution

4667

May 3rd, 2018 05:00

DDPE not decrypting all files

I have been having this problem lately that the decryption process isnt completely decrypting files. Alot of them are browser files (Firefox or Chrome) but there are alot of Windows files as well. I am running 8.17.2 and this one particular endpoint has been decrypting now for 2 days. I am not connected to the internet, logging in as an admin, the decryption service says in the description Decryption Sweep (from what I understand means Decryption sweep - The Service is decrypting files and possibly requesting to decrypt locked files.)

 

I dont know how to get these to decrypt so I can do what I need to do (cloning hard drive to a new one).

 

156 Posts

May 14th, 2018 09:00

Hi donnaroehrig,

I'm sorry to see the issues you've had with the product so far, hopefully once we get through this issue, you'll be on the home stretch.

When we are decrypting files, we leverage a service that you seem to be looking at called "Dell Encryption Removal Agent". The Various service descriptions indicate various stages of the decrypt. These can be seen within the "Services" control panel. 

Here are the statuses:

Waiting for Deactivation

Dell Encryption is still installed, is still configured, or both. Decryption does not start until Dell Encryption is uninstalled.

Initial sweep

The Service is making an initial sweep, calculating the number of encrypted files and bytes. The initial sweep occurs one time.

Decryption sweep

The Service is decrypting files and possibly requesting to decrypt locked files.

Decrypt on Reboot (partial)

The decryption sweep is complete and some locked files (but not all) are to be decrypted on the next restart.

Decrypt on Reboot

The decryption sweep is complete and all locked files are to be decrypted on the next restart.

All files could not be decrypted

The decryption sweep is complete, but all files could not be decrypted. This status means one of the following occurred:

  • The locked files could not be scheduled for decryption because they were too big, or an error occurred while making the request to unlock them.
  • An input/output error occurred while decrypting files.
  • The files could not be decrypted by policy.
  • The files are marked as should be encrypted.
  • An error occurred during the decryption sweep.

Complete

The decryption sweep is complete. The Service, the executable, the driver, and the driver executable are all scheduled for deletion on the next restart.

Start Menu > Type Services and click on services > Look for Encryption Removal Agent. The area in the red box will have the status of the agent

 

During this decryption process, we will be quickly processing files, and those that we cannot process (files that may be loaded at system boot time) will attempt to be processed on the next reboot of the device. by default we are limiting this to a small amount of memory to achieve a quick boot process, though this may not decrypt all data that is being immediately accessed. We can increase the amount of memory that we leverage on system reboot to ensure that we decrypt all data as quickly as possible. To increase this amount, you can create this registry key:

HKLM\Software\Credant\DecryptAgent
DWORD: MaxBytesReboot
Value: 0

If you are uncomfortable making this change, our Dell Data Security ProSupport for Software team can assist at any time. Let us know if this does not get you moving in the right direction, and we can definitely work on other options. 

May 14th, 2018 09:00

Thank you for the info. I actually worked with ProSupport and he had told me about the registry key (I knew about the Service statues). But this is great info for others to know about as well. Thank you for all your help!

 

Sincerley,

Donna Roehrig

No Events found!

Top