Performing Restores of files or servers encrypted by Dell Data Protection Encryption (4040207)

Performing Restores of files or servers encrypted by Dell Data Protection Encryption

You have installed Dell Data Protection Encryption in your environment and encrypted some drives. You are backing up the encrypted drives with AppAssure or Rapid Recovery. Attempting a file level restore presents an "access denied" or a "file or directory is corrupted" type of error message. When restoring a server using Bare Metal Restore or Virtual Export, a 74 stop BSOD is presented.

This is expected behavior. AppAssure and Rapid Recovery works at the block level to perform backups. Encrypted data is backed up in its encrypted state.  Dell Data Protection Encryption is done at the block level.  If the volume image created by AppAssure or Rapid Recovery is viewed anywhere other than on the original machine, it will still be encrypted without the proper keys available to decrypt the data on those volume images. This is simply attempting to read the encrypted drive itself without first unlocking the encryption.

As for the 74 STOP, it is expected behavior by the DDPE software.  This indicates that the system has detected a SDE failure due to a change in the hardware specifications.  It is a safety measure of DDPE to prevent booting encrypted drives on other systems.

1. Install Local Mount Utility on the protected machine - see KB 118198 Downloading and Installing the Local Mount Utility.
2. Connect to Core server: Add core, enter hostname or IP of Core server, and credentials - these should be an account which is a member of the Administrators Group on the Core server
3. Select the agent and recovery point needed
4. Right-click the recovery point to mount it - see KB 119971 Mounting a Recovery Point Using the Local Mount Utility.
5. Data should be readable, as the necessary data to unlock encryption is already present on this machine.

Solution 2:

1. Install the DDP | E Shield application.
   1. Where can I download DDP|E Server and Shield Software?
2. Use the CMGAU tool to inject the proper key material for the decryption.
   1. Dell Data Protection| Encryption administrative utilities and their functions

Server Restores

NOTE:  Performing virtual exports to the same hypervisor and hardware version should work without issue.  

You will see the 74 STOP code if you perform restores across different hypervisors for v2v or p2v or v2p restores.

To solve 74 STOP BSOD, you will need to perform a SDE Recovery.  The instructions can be found at this webpage:  How to perform a SDE recovery for DDP | E or Credant managed endpoint