97 replies to this topic

[rmgross78]

also tried the scripts posted on page 2!

[rmgross78]

Here is what I am getting. As you can see in the picture when I launch the DMU it sees the C: drive but when I click on it to type in the username and password I get the message in the screenshot. I have tried all versions of the DMU from 1.4 up to 2.0 with the same results.

(It wouldn't let me imbed the image in the post)

http://www.flickr.co...N06/6466835005/

[rmgross78]

ok, newest update....... for giggles I decided to burn the ISO to an actual CD and test, because I have had issues in the past when converting over to a USB from an ISO. Wouldnt you know the DMU works from the CD! I have tried the built in tools to write the image to the USB and get DMU to work but have not been able to.

Any ideas or other tools I might try for converting from ISO to USB?

[mbushnell]

To get the ISO to a USB this is what I did. Goto the link below and look for the following file. "unetbootin-eeeubuntu-windows-276.exe" Download it and run it. It worked great for me.

http://sourceforge.n...tbootin/Custom/

[m3fan]

I use Win7PE_SE and also there is a check box to "Run all from Ram" that you need to check. This is under BuildCDDrive_X_Y . This way everything gets packed in the WIM file.

[rmgross78]

Thank you to the both of you. I will try both methods and report back, hopefully this will be it.... my head is starting to hurt from all the banging it on the desk!

[mbushnell]

Good luck!
Not sure if this is off topic or not, but I am looking for a way to password protect my boot cdusb so that no users can access it as I have the checkpoint app on it. I have searched and found many confusing things about password protection. I am looking for a way to have a password come up before or right after one starts to boot from the cdusb, is this even possible?

[rmgross78]

Still no go

Tried 4 different programs to convert ISO over to the USB, 3 programs gave the same error message as before the unetbootin program failed to boot the drive when selected from the boot menu. I am rebuilding the key and going to try another boot loader besides grub to see if that makes a difference.

[m3fan]

RMgross78, It is pretty simple to do it yourself.

First you need to make your USB drive bootable.
A. Make a bootable flash drive by opening a Command Prompt, 'Run as Administrator', and run these commands:
diskpart
list disk (this shows you a list with all your drives)
select disk 2 (or whatever the disk # for your USB is)
clean
create partition primary
select partition 1
active
format fs=ntfs
assign
exit

B. Mount your Winbuilder created ISO and copy the BOOT.WIM to your Desktop or anywhere. it is inside Sources folder. I use Magic Disk to mount, its free.

C: Create a standard WinPE
Open Windows PE Tools Command Prompt As Administrator
copype.cmd x86 c:winpe_x86

D: Copy everything inside the winpe_x86 folder to the root of your USB drive and then replace the Boot.wim file with the one you got from your ISO.

Make sure when you built your ISO you need to run all your programs from RAM as i mentioned in my previous post #80.

[rmgross78]

M3fan,

The problem isn't booting the keys, the keys boot perfectly fine. The problem is getting the DMU to function properly when using a USB key to boot, the DMU works perfect when using the CD but when converting over to USB for some reason it loses its ability to unlock the C: drive (see error in post #77).

[rmgross78]

After comparing the 2, the cd vs USB boot, the only difference I see is the registry entry for the prot_2k file.

Under HKLM>SYSTEM>ControlSet001>Services>prot_2kEnum

The USB version has the USB device listed as DISK 0 and the local hard drive as DISK 1

The CD version of course is only showing DISK 0 and it is the local hard drive

Where as my old BartPe USB boot disk, which DMU is working fine on, lists the USB drive as DISK 1 and the local hard drive as DISK 0

I am wondering if having the USB drive listed as DISK 0 is somehow messing up the way DMU reads the drives and it doesnt see DISK 1 as being a valid encrypted drive.

Any thoughts or am I completely barking up the wrong tree?

[Wonko the Sane]

Not sure if this is off topic or not, but I am looking for a way to password protect my boot cdusb so that no users can access it as I have the checkpoint app on it. I have searched and found many confusing things about password protection. I am looking for a way to have a password come up before or right after one starts to boot from the cdusb, is this even possible?

Yes, it is off topic
and yes, it is possible .

Would you like it/will it fulfill your requirements?

Here:
http://reboot.pro/2984/

More direct tutorial:
http://forums.hak5.o...showtopic=14121

It obviously makes MUCH more sense on a CD (Read Only, NO write possible) that on a USB stick (unless you use the U3 feature or the like), and it is NOT "safe" as it won't prevent (unathorized) copy (the CD partition stick gives some more "protection", but still it is not an encryption/copy protection solution).

The CD version of course is only showing DISK 0 and it is the local hard drive

Where as my old BartPe USB boot disk, which DMU is working fine on, lists the USB drive as DISK 1 and the local hard drive as DISK 0

I am wondering if having the USB drive listed as DISK 0 is somehow messing up the way DMU reads the drives and it doesnt see DISK 1 as being a valid encrypted drive.

Any thoughts or am I completely barking up the wrong tree?

Cannot say, but you can *try* to use grub4dos to:
remap drives ((hd0) to (hd1) and (hd1) to (hd0))
map to --mem a "vista or 7 "boot floppy (i.e. a floppy image with BOOTMGR and a sitable bootBCD

This way you will have:

• the USB disk as disk 1
• the internal disk as disk 0
• the actual booting initiated from the "vitual floppy"

BTW actual disk order (before the eventual re-mapping) is given by a combination of the BIOS and of the OS, there are BIOSes that "normally" shift drive order and some that do not.
It is also possible that you can start the PE directly from second disk, i.e. disk 1 once remapped but you will need to try (and use the floppy image trick if this doesn't work).

Details about the floppy can be found here:
http://www.multibooters.co.uk/
http://www.multiboot....uk/floppy.html



Wonko

[rmgross78]

I officially give up................... I'll just have to live with 2 separate keys............

[Wonko the Sane]

I officially give up................... I'll just have to live with 2 separate keys............

Oww, comeon, giving up is NOT an option!

Be a man! (or woman, or whatever)

Fight for what you find rightful!

GO, rmgross78, GO!

Let's put it in another way , think at all the peeps that tried to help you, they probably did that because they wanted you to get to a result, not to let you give up.....do it for them if not for you.....


Wonko

[rmgross78]

Everything works perfectly except that darn piece from Checkpoint.... who I already hate.... I have tried everything suggested and even probably invented a few new ways to do it. It seems no matter what I try I get the same results when booting off the USB key " Unable to find full disk encryption protected volumes..." That error message has been giving me nightmares for over a week now!

It just doesnt make sense that when burned to CD it works perfectly fine, but when converted over to USB everything works EXCEPT the dynamic mount utility......

Maybe not giving up but need a break from it....

[Wonko the Sane]

Maybe not giving up but need a break from it....

Sure, this not only helps but is also "allowed" .
You have all the time in the world (and even more)

...unless the sky falls on our heads tomorrow :
http://reboot.pro/6771/


Wonko

[m3fan]

Everything works perfectly except that darn piece from Checkpoint.... who I already hate.... I have tried everything suggested and even probably invented a few new ways to do it. It seems no matter what I try I get the same results when booting off the USB key " Unable to find full disk encryption protected volumes..." That error message has been giving me nightmares for over a week now!

It just doesnt make sense that when burned to CD it works perfectly fine, but when converted over to USB everything works EXCEPT the dynamic mount utility......

Maybe not giving up but need a break from it....

So did you try extracting the Boot.wim from the ISO and replacing on your USB? My USB drive is working perfectly fine with CheckPoint. Also I don't use Grub for boot loader, but the native Windows boot loader.

[rmgross78]

Many times, Even excluded the checkpoint script from the builder and used the Checkpoint tool to inject the driver and needed files into the extract boot.wim. Created a fresh Windows 7 PE using the WAIK and replaced the boot.wim from that with the one created by Winbuilder. Tried using all the different boot managers in Winbuilder all with the same results, except when I burn them to CD they work.

The only other thing I noticed before I left the office for the day, the CD comes up to the grub boot menu, where you select what you want to boot, but the USB one does not, might be worth looking into maybe.

[rmgross78]

ok, I'm back after taking a little break. I have got some news! I have made some head way with the USB version of the key. When we left off the burned CD worked fine but when converted over to USB the Checkpoint wouldn't unlock the drive and gave some crazy error. so I started playing around and found that f I keep the bootmgr on the USB key from when I made it and then copied and overwrote all the other files on the USB from the burned CD copy I was able to boot the USB drive but I was getting the BSOD of 0x0000000a, so I went into the BIOS and switched the hard drive from AHCI mode to IDE mode to see if it was a driver issue with the sata controller.

WOULDN'T YOU KNOW IT, the damn thing worked! I was able to boot off the USB stick and unlock the drive without a BSOD. Now I am going to play around with my drivers some and see if I cant get it to work while in AHCI mode because again it works in AHCI mode with the CD......

[rmgross78]

Further testing, when leaving system in AHCI mode and using the checkpoint alternative boot menu the system boots and the DMU prompts me for the password but never unlocks..... the plot thickens.....

[graft]

Hi m3fan.

can you reshare your script? Mediafire link isn't working anymore. (from Post #50).
I have the problem that i can't see any drives with the script from homes32 (Post #46).
I have already tried to burn the iso.. still no drives.. something is wrong

Thank you

[Nathan Titus]

Another newbie here begging for help. I've been trying to use this script. I'm having trouble getting shortcuts to show up for the CheckPoint utility. The check boxes in the script window don't seem to work. I have edited a couple of typos but that hasn't seemed to help.
Any help is appreciated.

here is the script:

[Main]

Title="CheckPoint FDE"

Description=CheckPoint Dynamic Mount

Selected=True

Level=5

Version=001

Author=BmW-MaN

Date=07.01.2011

Info=



[Variables]

%ProgramFolder%=CheckPoint

%ProgramEXE%=FDE_Dyn_Disk.exe

%ProgramTitle%="CheckPoint FDE"



[Process]

Echo,Processing %ProgramTitle%...

StrFormat,filename,%Scriptdir%,%scriptfolder%

RunFromRam,%pCheckBoxRunRam%





DirMake,"%target_prog%CheckPoint"

FileCopy,"%ScriptDir%fdeProgramfiles*.*","%target_prog%CheckPoint"







//Add_Shortcut,[Type],[Folder],[FullFileName],[Title],[Work Folder],[Parameters],[IconFile( .ico .exe)],[StartMode(1, 2, 3, or 4)]



If,%pCheckBoxStartMenu%,Equal,True,Add_Shortcut,StartMenu

//,%pTextBoxStartFolder%,%PE_Programs%%ProgramFolder%%ProgramEXE%,%pTextBoxStartTitel%



If,%pCheckBoxDesktop%,Equal,True,Add_Shortcut,Desktop,,%PE_Programs%%ProgramFolder%%ProgramEXE%,%pTextBoxStartTitel%

If,%pCheckBoxQuickL%,Equal,True,Add_Shortcut,QuickLaunch,,%PE_Programs%%ProgramFolder%%ProgramEXE%,%pTextBoxStartTitel%









[Interface]

pBevelShortcuts=pBevel1,1,12,6,6,395,170

pTextBoxStartTitel="Name for Shortcuts:",1,0,20,40,200,18,"CheckPoint Dynamic Mount"

pTextBoxStartFolder="Start Menu folder:",1,0,20,90,200,21,Encryption

pTextLabeShortcutsTo="Add shortcuts to:",1,1,260,20,135,20,8,Normal

pCheckBoxStartMenu="Start Menu",1,3,260,50,200,20,True

pCheckBoxDesktop="Desktop",1,3,260,70,200,20,True

pCheckBoxQuickL="QuickLaunch",1,3,260,90,200,20,False

pCheckBoxRunRam="Run from ram (boot.wim)",1,3,20,141,183,18,True

You can save it in a text file called fde.script and create another folder called fde with a sub folder Programfiles. That is where you put all the FDE utility files. I am using v 1.4 right now. Your whole path should look like this C:WinBuilderProjectsWin7PE_SEAppsEncryptionCheckPointfdeProgramfiles
The files you need inside are:
FDE_Dyn_Disk.exe
ccore32.bin
plang32.lng
psui.dll
Microsoft.VC80.CRT.manifest
Microsoft.VC80.MFC.manifest
mfc80.dll
msvcp80.dll
msvcr80.dll


I am sure there is a better way to do this but for now it works for me

[Stefan007]

Hi all,

Is there anybody using WinBuilder (082) on a Win7 (64bit) with a working script for Checkpoint (FDE-DynamicMountUtility)?

Thanks in advance