Recovering encrypted data on SD cards

Introduction

The article is describing how to recover the encrypted data of a SecuBox storage in case of damaging or

destroying the base Windows CE device.

There are some prerequisites:

· the SecuBox image file must be stored on a storage card (a memory/flash card, e.g. MicroSD card)

· the storage card must be removable (detachable from the device)

· the storage card must not be affected by damaging or destroying the base Windows CE device

· the encryption password of the SecuBox must be available

· the desktop PC must run Windows XP/7/Vista/8

· the desktop PC must have installed a memory card reader that supports the storage card type of the

base Windows CE device

· the desktop PC must have Dekart Private Disk software installed

If the conditions meet the prerequisites then the data recovering flows according the following description.

The main idea of the description flow to show the similarity working with SecuBox storage on both Windows

platforms (CE and desktop).

1. Working with the SecuBox storage on the Windows CE device

As described above the SecuBox image file must be stored on a memory card. Usually, a memory card is

visible in Windows CE Explorer as a Storage Card.

If SecuBox software is installed properly then the SecuBox file image is visible as at the following picture.

1.1. Mounting the SecuBox storage

In order to use the data inside the SecuBox storage it necessary to mount it.

1.1.1. Mounting via Windows CE Explorer

The simpliest way to mount the SecuBox storage is to double click it in Windows CE Explorer.

The decryption password window should appear.

If the password is typed correctly the SecuBox storage should appear in Windows CE Explorer as a regular

storage/memory card.

It could be explored by a double click allowing the same operations as for a regular storage/memory card.

1.1.2. Mounting via SecuBox interface

Besides that, there are some different ways to mount the SecuBox storage. It is possible to launch SecuBox

software manually via Windows CE Start menu.

The SecuBox main window should appear.

The SecuBox storage could be mounted by clicking Mount button or by using Storage/Mount menu.

The browse dialog appears allowing to browse to the SecuBox image file.

Upon clicking OK the password dialog appears and the flow continues as by simple double clicking the

SecuBox image file (see 1.1.1. Mounting via Windows CE Explorer)

If Recently Mounted option is enabled then SecuBox image file is visible in the list of SecuBox storages.

1.1.3. Mounting via SecuBox menu in the System Tray

When SecuBox software is running there should be the SecuBox picture in the System Tray.

The SecuBox menu appears by clicking the SecuBox picture in the System Tray.

Upon clicking Mount menu the browse dialog appears and the flow continues as by using SecuBox interface

(see 1.1.2. Mounting via SecuBox interface)

If Recently Mounted option is enabled then SecuBox image file is visible in the Recently Mounted menu.

1.2. Unmounting the SecuBox storage

In order to stop using the data inside the SecuBox storage it necessary to unmount it.

1.2.1. Unmounting via SecuBox menu in the System Tray

The mouted SecuBox storage could be unmounted in the same way as mounting it via the System Tray.

Unmount menu should appear by clicking the SecuBox picture in the System Tray.

1.2.2. Unmounting via SecuBox interface

Besides that, it is possible to unmount the SecuBox storgae via SecuBox interface. The mounted storage is

visible in the list of SecuBox storages.

2. Working with the SecuBox storage on the desktop Windows

Working with the SecuBox storage on the desktop Windows is very similar to Windows CE. But before this, the

storage card with SecuBox image file must be inserted into the memory card reader. If the reader works

properly and the storage card is fine then Windows Explorer displays it as a Removable Disk.

If Private Disk software is installed properly then the SecuBox file image is visible as at the following picture.

2.1. Mounting the SecuBox storage

In order to use the data inside the SecuBox storage it necessary to mount it.

2.1.1. Mounting via Windows Explorer

The simpliest way to mount the SecuBox storage is to double click it in Windows Explorer or use the context

menu.

The decryption password window should appear.

If the password is typed correctly a new Removable Disk should appear in Windows Explorer.

It could be explored by a double click allowing the same operations as for a regular Removable Disk.

2.1.2. Mounting via Private Disk interface

Besides that, there are some different ways to mount the SecuBox storage. It is possible to launch Private Disk

software manually via Windows Start menu.

The Private Disk main window should appear.

The SecuBox storage could be mounted by clicking Connect button. The browse dialog appears allowing to

browse to the SecuBox image file.

It is necessary to choose SecuBox-file image type before browsing.

Upon clicking OK the password dialog appears and the flow continues as by simple double clicking the

SecuBox image file (see 2.1.1. Mounting via Windows Explorer)

2.1.3. Mounting via Private Disk menu in the System Tray

When Private Disk software is running there should the Private Disk picture in the System Tray.

The Private Disk menu appears by clicking the Private Disk picture in the System Tray.

Upon clicking Connect Disk menu the browse dialog appears and the flow continues as by using Private Disk

interface (see 2.1.2. Mounting via Private Disk interface)

2.2. Copying the encrypted data

It is possible to do almost everything with the mounted SecuBox storage in desktop Windows (Copy, Delete,

Open etc) because it is considered by Windows as a regular Removable Disk.

2.3. Unmounting the SecuBox storage

In order to stop using the data inside the SecuBox storage it necessary to unmount it.

2.3.1. Unmounting via Private Disk menu in the System Tray

The mouted SecuBox storage could be unmounted in the same way as mounting it via the System Tray.

Disconnect Disk menu should appear by clicking the Private Disk picture in the System Tray.

2.3.2. Unmounting via Private Disk interface

Besides that, it is possible to unmount the SecuBox storgae manually via Private Disk interface. The mounted

Removable Disk is visible as a separate tab of the Private Disk window. Upon clicking Disconnect button the

storage will be dismounted.

2.4. Exploring the SecuBox storage

Besides the regular mounting and using SecuBox storages in Private Disk there is a possibility to

Copy/Paste/Delete the data in case of limited user rights in Windows. Nowadays, desktop Windows does not

allow some operations like disk mounting or driver operating for every user. In such case, Private Disk warns

about such limits.

After that the Private Disk window disables most of its functionality.

Nevertheless, it still allows to browse the SecuBox storage in order to perform some base operations

(Copy/Paste/Delete) that are available by clicking Export/Import/Delete buttons. Closing the window

unmounts the storage.

2.5. Force Exploring the SecuBox storage

Sometimes, it is necessary and even recommended to use the mentioned above explore mode by force.

Because in this case the mounted storage in not visible as a Removable Disk. Even more, Windows could not

see it and work with it in a regular way. It is possible to work with storage in Private Disk explore window only.

So, such mounting could be called as secure mounting. The Explore mode could be activated by launching

Private Disk with a special command line parameter "/explorer".