Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Frequently asked questions (FAQs) about uninstallation of Full Disk Encryption (FDE)

    • Updated:
    • 24 Feb 2015
    • Product/Version:
    • Endpoint Encryption 3.0 Full Disk Encrypti
    • Endpoint Encryption 5.0
    • Platform:
    • Windows 2003 Standard 64-bit
    • Windows 2008 Server R2
    • Windows 8 32-bit
    • Windows 8 64-bit
    • Windows Vista 32-bit
    • Windows Vista 64-bit
    • Windows XP SP3 32-bit
Summary

Know the answers to the common questions about removing FDE.

Details
Public

Below are the options to remove FDE:

Using the Recovery Console

Follow this procedure only when you are unable to boot to Windows.

  1. Log into the FDE pre-boot as an administrator or authenticator.
  2. Click Access Recovery Console.
  3. On the Recovery Console, decrypt the drive and recover the files to a USB storage device.
  4. Remove the FDE pre-boot when the drive is decrypted.
  5. Do one the following:
    • For FDE SP7, reboot into Windows and run C:\Program Files\Mobile Armor\DataArmor\ArmorUninstall.exe to remove the FDE Windows files.
    • For FDE SP4-SP6, boot Windows into Safe Mode and disable the Windows Service MobileSentinel. Reboot Windows normally. Click Start > Run > msiexec /x {17BACE08-76BD-4FF5-9A06-5F2FA9EBDDEA}.
    • For FDE 3.0.7.1 or lower, boot Windows into Safe Mode and disable the Windows Service MobileSentinel. Reboot Windows normally. Click Start > Run > msiexec /x{8ACDBD28-C2FD-4334-98CF-F561D1BE9AD8}.

Using the Decrypt CD

Follow this procedure when you cannot load the FDE preboot. To use the Decrypt CD, you must be connected to the network.

  1. Boot to the Decrypt CD.
  2. Select Decrypt.
  3. Enter the credentials when prompted.
  4. Do one of the following after decryption:
    • For FDE SP7, reboot into Windows and run C:\Program Files\Mobile Armor\DataArmor\ArmorUninstall.exe to remove the FDE Windows files.
    • For FDE SP4-SP6, boot Windows into Safe Mode and disable the Windows Service MobileSentinel. Reboot Windows normally. Click Start > Run > msiexec /x {17BACE08-76BD-4FF5-9A06-5F2FA9EBDDEA}.
    • For FDE 3.0.7.1 or lower, boot Windows into Safe Mode and disable the Windows Service MobileSentinel. Reboot Windows normally. Click Start > Run > msiexec /x{8ACDBD28-C2FD-4334-98CF-F561D1BE9AD8}.

When you boot Windows after FDE uninstallation, Windows attempts to login without prompting. The issue is caused by the AutoAdminLogon registry key located in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon which is still set to "1" after removing FDE.

To resolve the issue, change the AutoAdminLogon registry key value to "0".

The following message shows even when you have removed FDE:

Full Disk Encryption has finished decrypting your device, you may now complete the uninstallation of the software.

This error may be caused by an incomplete uninstallation.

To resolve the issue, delete the %primarydrive%\DAClientUninstall.log file.

Premium
Internal
Rating:
Category:
Troubleshoot
Solution Id:
1059733
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.