Reading bitlocker protected file system from Linux











up vote
2
down vote

favorite
1












I have a Surface pro 3 and I tried to dual boot it, but I have done something wrong and now it just boots to UEFI.



I have all my life inside this little SSD and I know I'm sooo stupid because I didn't back it up and now it's encrypted.



I have booted it to Ubuntu using USB flash drive and pressed the TRY UBUNTU so I won't lose my data



So Anybody please could tell me how to decrypt it so I could recover my data back?



I have the encryption key










share|improve this question
























  • Have you tried Dislocker? github.com/Aorimn/dislocker/blob/master/README.md
    – Steve
    Apr 13 at 18:25















up vote
2
down vote

favorite
1












I have a Surface pro 3 and I tried to dual boot it, but I have done something wrong and now it just boots to UEFI.



I have all my life inside this little SSD and I know I'm sooo stupid because I didn't back it up and now it's encrypted.



I have booted it to Ubuntu using USB flash drive and pressed the TRY UBUNTU so I won't lose my data



So Anybody please could tell me how to decrypt it so I could recover my data back?



I have the encryption key










share|improve this question
























  • Have you tried Dislocker? github.com/Aorimn/dislocker/blob/master/README.md
    – Steve
    Apr 13 at 18:25













up vote
2
down vote

favorite
1









up vote
2
down vote

favorite
1






1





I have a Surface pro 3 and I tried to dual boot it, but I have done something wrong and now it just boots to UEFI.



I have all my life inside this little SSD and I know I'm sooo stupid because I didn't back it up and now it's encrypted.



I have booted it to Ubuntu using USB flash drive and pressed the TRY UBUNTU so I won't lose my data



So Anybody please could tell me how to decrypt it so I could recover my data back?



I have the encryption key










share|improve this question















I have a Surface pro 3 and I tried to dual boot it, but I have done something wrong and now it just boots to UEFI.



I have all my life inside this little SSD and I know I'm sooo stupid because I didn't back it up and now it's encrypted.



I have booted it to Ubuntu using USB flash drive and pressed the TRY UBUNTU so I won't lose my data



So Anybody please could tell me how to decrypt it so I could recover my data back?



I have the encryption key







windows-10






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited Apr 13 at 11:51









vidarlo

8,47542341




8,47542341










asked Apr 13 at 11:30









YoussefMoh

215




215












  • Have you tried Dislocker? github.com/Aorimn/dislocker/blob/master/README.md
    – Steve
    Apr 13 at 18:25


















  • Have you tried Dislocker? github.com/Aorimn/dislocker/blob/master/README.md
    – Steve
    Apr 13 at 18:25
















Have you tried Dislocker? github.com/Aorimn/dislocker/blob/master/README.md
– Steve
Apr 13 at 18:25




Have you tried Dislocker? github.com/Aorimn/dislocker/blob/master/README.md
– Steve
Apr 13 at 18:25










2 Answers
2






active

oldest

votes

















up vote
1
down vote













After booting into the ubuntu the live cd, enable the universe repository



settings > software and update > ubuntu software > tick community maintained software



update the local repo and install some needed packages:



sudo apt update
sudo apt install dislocker libfuse-dev


make two folders, /media/bitlocker and /media/mount:



sudo mkdir /media/bitlocker /media/mount


find the encrypted windows partition:



lsblk


you would see something like



NAME         MAJ:MIN RM   SIZE RO TYPE MOUNTPOINT
sda 179:0 0 58.2G 0 disk
├─sda1 179:1 0 200M 0 part /boot/efi
├─sda2 179:2 0 54.3G 0 part /


per the sizes you can predict your windows partition



decrypt that partition with your bitlocker password:



sudo dislocker -r -V /dev/sdaX -u -- /media/mount


followed by password

OR



sudo dislocker -r -V /dev/sdaX -uPASSWORD -- /media/bitlocker


Replace PASSWORD with your bitlocker password



In case you want to use the recovery password instead, we can decrypt it using that:



sudo dislocker -r -V /dev/sdXY <recov_pass> --  /media/bitlocker
sudo dislocker -r -V /dev/sdaX -p1536987-000000-. . .-000000-000000 -- /media/bitlocker


replace 1536987-000000-. . .-000000-000000 with your recovery password



Now, we finally mount:



sudo -i
cd /media/bitlocker
mount -r -o loop dislocker-file /media/mount


Now you can move to the /media/mount folder and see your decrypted data



For detailed answer look at this answer and that answer






share|improve this answer




























    up vote
    1
    down vote













    ptetteh227's answer was just the fix I needed. Just an FYI for anyone else.



    mount -r -o loop dislocker-file /media/mount


    did not work for me.



    mount -o ro,loop /media/bitlocker/dislocker-file /media/mount


    worked and I was able to access the data off the encrypted volume.






    share|improve this answer























      Your Answer








      StackExchange.ready(function() {
      var channelOptions = {
      tags: "".split(" "),
      id: "89"
      };
      initTagRenderer("".split(" "), "".split(" "), channelOptions);

      StackExchange.using("externalEditor", function() {
      // Have to fire editor after snippets, if snippets enabled
      if (StackExchange.settings.snippets.snippetsEnabled) {
      StackExchange.using("snippets", function() {
      createEditor();
      });
      }
      else {
      createEditor();
      }
      });

      function createEditor() {
      StackExchange.prepareEditor({
      heartbeatType: 'answer',
      convertImagesToLinks: true,
      noModals: true,
      showLowRepImageUploadWarning: true,
      reputationToPostImages: 10,
      bindNavPrevention: true,
      postfix: "",
      imageUploader: {
      brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
      contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
      allowUrls: true
      },
      onDemand: true,
      discardSelector: ".discard-answer"
      ,immediatelyShowMarkdownHelp:true
      });


      }
      });














      draft saved

      draft discarded


















      StackExchange.ready(
      function () {
      StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1024636%2freading-bitlocker-protected-file-system-from-linux%23new-answer', 'question_page');
      }
      );

      Post as a guest















      Required, but never shown

























      2 Answers
      2






      active

      oldest

      votes








      2 Answers
      2






      active

      oldest

      votes









      active

      oldest

      votes






      active

      oldest

      votes








      up vote
      1
      down vote













      After booting into the ubuntu the live cd, enable the universe repository



      settings > software and update > ubuntu software > tick community maintained software



      update the local repo and install some needed packages:



      sudo apt update
      sudo apt install dislocker libfuse-dev


      make two folders, /media/bitlocker and /media/mount:



      sudo mkdir /media/bitlocker /media/mount


      find the encrypted windows partition:



      lsblk


      you would see something like



      NAME         MAJ:MIN RM   SIZE RO TYPE MOUNTPOINT
      sda 179:0 0 58.2G 0 disk
      ├─sda1 179:1 0 200M 0 part /boot/efi
      ├─sda2 179:2 0 54.3G 0 part /


      per the sizes you can predict your windows partition



      decrypt that partition with your bitlocker password:



      sudo dislocker -r -V /dev/sdaX -u -- /media/mount


      followed by password

      OR



      sudo dislocker -r -V /dev/sdaX -uPASSWORD -- /media/bitlocker


      Replace PASSWORD with your bitlocker password



      In case you want to use the recovery password instead, we can decrypt it using that:



      sudo dislocker -r -V /dev/sdXY <recov_pass> --  /media/bitlocker
      sudo dislocker -r -V /dev/sdaX -p1536987-000000-. . .-000000-000000 -- /media/bitlocker


      replace 1536987-000000-. . .-000000-000000 with your recovery password



      Now, we finally mount:



      sudo -i
      cd /media/bitlocker
      mount -r -o loop dislocker-file /media/mount


      Now you can move to the /media/mount folder and see your decrypted data



      For detailed answer look at this answer and that answer






      share|improve this answer

























        up vote
        1
        down vote













        After booting into the ubuntu the live cd, enable the universe repository



        settings > software and update > ubuntu software > tick community maintained software



        update the local repo and install some needed packages:



        sudo apt update
        sudo apt install dislocker libfuse-dev


        make two folders, /media/bitlocker and /media/mount:



        sudo mkdir /media/bitlocker /media/mount


        find the encrypted windows partition:



        lsblk


        you would see something like



        NAME         MAJ:MIN RM   SIZE RO TYPE MOUNTPOINT
        sda 179:0 0 58.2G 0 disk
        ├─sda1 179:1 0 200M 0 part /boot/efi
        ├─sda2 179:2 0 54.3G 0 part /


        per the sizes you can predict your windows partition



        decrypt that partition with your bitlocker password:



        sudo dislocker -r -V /dev/sdaX -u -- /media/mount


        followed by password

        OR



        sudo dislocker -r -V /dev/sdaX -uPASSWORD -- /media/bitlocker


        Replace PASSWORD with your bitlocker password



        In case you want to use the recovery password instead, we can decrypt it using that:



        sudo dislocker -r -V /dev/sdXY <recov_pass> --  /media/bitlocker
        sudo dislocker -r -V /dev/sdaX -p1536987-000000-. . .-000000-000000 -- /media/bitlocker


        replace 1536987-000000-. . .-000000-000000 with your recovery password



        Now, we finally mount:



        sudo -i
        cd /media/bitlocker
        mount -r -o loop dislocker-file /media/mount


        Now you can move to the /media/mount folder and see your decrypted data



        For detailed answer look at this answer and that answer






        share|improve this answer























          up vote
          1
          down vote










          up vote
          1
          down vote









          After booting into the ubuntu the live cd, enable the universe repository



          settings > software and update > ubuntu software > tick community maintained software



          update the local repo and install some needed packages:



          sudo apt update
          sudo apt install dislocker libfuse-dev


          make two folders, /media/bitlocker and /media/mount:



          sudo mkdir /media/bitlocker /media/mount


          find the encrypted windows partition:



          lsblk


          you would see something like



          NAME         MAJ:MIN RM   SIZE RO TYPE MOUNTPOINT
          sda 179:0 0 58.2G 0 disk
          ├─sda1 179:1 0 200M 0 part /boot/efi
          ├─sda2 179:2 0 54.3G 0 part /


          per the sizes you can predict your windows partition



          decrypt that partition with your bitlocker password:



          sudo dislocker -r -V /dev/sdaX -u -- /media/mount


          followed by password

          OR



          sudo dislocker -r -V /dev/sdaX -uPASSWORD -- /media/bitlocker


          Replace PASSWORD with your bitlocker password



          In case you want to use the recovery password instead, we can decrypt it using that:



          sudo dislocker -r -V /dev/sdXY <recov_pass> --  /media/bitlocker
          sudo dislocker -r -V /dev/sdaX -p1536987-000000-. . .-000000-000000 -- /media/bitlocker


          replace 1536987-000000-. . .-000000-000000 with your recovery password



          Now, we finally mount:



          sudo -i
          cd /media/bitlocker
          mount -r -o loop dislocker-file /media/mount


          Now you can move to the /media/mount folder and see your decrypted data



          For detailed answer look at this answer and that answer






          share|improve this answer












          After booting into the ubuntu the live cd, enable the universe repository



          settings > software and update > ubuntu software > tick community maintained software



          update the local repo and install some needed packages:



          sudo apt update
          sudo apt install dislocker libfuse-dev


          make two folders, /media/bitlocker and /media/mount:



          sudo mkdir /media/bitlocker /media/mount


          find the encrypted windows partition:



          lsblk


          you would see something like



          NAME         MAJ:MIN RM   SIZE RO TYPE MOUNTPOINT
          sda 179:0 0 58.2G 0 disk
          ├─sda1 179:1 0 200M 0 part /boot/efi
          ├─sda2 179:2 0 54.3G 0 part /


          per the sizes you can predict your windows partition



          decrypt that partition with your bitlocker password:



          sudo dislocker -r -V /dev/sdaX -u -- /media/mount


          followed by password

          OR



          sudo dislocker -r -V /dev/sdaX -uPASSWORD -- /media/bitlocker


          Replace PASSWORD with your bitlocker password



          In case you want to use the recovery password instead, we can decrypt it using that:



          sudo dislocker -r -V /dev/sdXY <recov_pass> --  /media/bitlocker
          sudo dislocker -r -V /dev/sdaX -p1536987-000000-. . .-000000-000000 -- /media/bitlocker


          replace 1536987-000000-. . .-000000-000000 with your recovery password



          Now, we finally mount:



          sudo -i
          cd /media/bitlocker
          mount -r -o loop dislocker-file /media/mount


          Now you can move to the /media/mount folder and see your decrypted data



          For detailed answer look at this answer and that answer







          share|improve this answer












          share|improve this answer



          share|improve this answer










          answered Apr 13 at 19:11









          ptetteh227

          920218




          920218
























              up vote
              1
              down vote













              ptetteh227's answer was just the fix I needed. Just an FYI for anyone else.



              mount -r -o loop dislocker-file /media/mount


              did not work for me.



              mount -o ro,loop /media/bitlocker/dislocker-file /media/mount


              worked and I was able to access the data off the encrypted volume.






              share|improve this answer



























                up vote
                1
                down vote













                ptetteh227's answer was just the fix I needed. Just an FYI for anyone else.



                mount -r -o loop dislocker-file /media/mount


                did not work for me.



                mount -o ro,loop /media/bitlocker/dislocker-file /media/mount


                worked and I was able to access the data off the encrypted volume.






                share|improve this answer

























                  up vote
                  1
                  down vote










                  up vote
                  1
                  down vote









                  ptetteh227's answer was just the fix I needed. Just an FYI for anyone else.



                  mount -r -o loop dislocker-file /media/mount


                  did not work for me.



                  mount -o ro,loop /media/bitlocker/dislocker-file /media/mount


                  worked and I was able to access the data off the encrypted volume.






                  share|improve this answer














                  ptetteh227's answer was just the fix I needed. Just an FYI for anyone else.



                  mount -r -o loop dislocker-file /media/mount


                  did not work for me.



                  mount -o ro,loop /media/bitlocker/dislocker-file /media/mount


                  worked and I was able to access the data off the encrypted volume.







                  share|improve this answer














                  share|improve this answer



                  share|improve this answer








                  edited Nov 27 at 16:01









                  abu_bua

                  3,10081023




                  3,10081023










                  answered Nov 27 at 15:39









                  Pacerfan9

                  111




                  111






























                      draft saved

                      draft discarded




















































                      Thanks for contributing an answer to Ask Ubuntu!


                      • Please be sure to answer the question. Provide details and share your research!

                      But avoid



                      • Asking for help, clarification, or responding to other answers.

                      • Making statements based on opinion; back them up with references or personal experience.


                      To learn more, see our tips on writing great answers.





                      Some of your past answers have not been well-received, and you're in danger of being blocked from answering.


                      Please pay close attention to the following guidance:


                      • Please be sure to answer the question. Provide details and share your research!

                      But avoid



                      • Asking for help, clarification, or responding to other answers.

                      • Making statements based on opinion; back them up with references or personal experience.


                      To learn more, see our tips on writing great answers.




                      draft saved


                      draft discarded














                      StackExchange.ready(
                      function () {
                      StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1024636%2freading-bitlocker-protected-file-system-from-linux%23new-answer', 'question_page');
                      }
                      );

                      Post as a guest















                      Required, but never shown





















































                      Required, but never shown














                      Required, but never shown












                      Required, but never shown







                      Required, but never shown

































                      Required, but never shown














                      Required, but never shown












                      Required, but never shown







                      Required, but never shown







                      Popular posts from this blog

                      flock() on closed filehandle LOCK_FILE at /usr/bin/apt-mirror

                      Mangá

                       ⁒  ․,‪⁊‑⁙ ⁖, ⁇‒※‌, †,⁖‗‌⁝    ‾‸⁘,‖⁔⁣,⁂‾
”‑,‥–,‬ ,⁀‹⁋‴⁑ ‒ ,‴⁋”‼ ⁨,‷⁔„ ‰′,‐‚ ‥‡‎“‷⁃⁨⁅⁣,⁔
⁇‘⁔⁡⁏⁌⁡‿‶‏⁨ ⁣⁕⁖⁨⁩⁥‽⁀  ‴‬⁜‟ ⁃‣‧⁕‮ …‍⁨‴ ⁩,⁚⁖‫ ,‵ ⁀,‮⁝‣‣ ⁑  ⁂– ․, ‾‽ ‏⁁“⁗‸ ‾… ‹‡⁌⁎‸‘ ‡⁏⁌‪ ‵⁛ ‎⁨ ―⁦⁤⁄⁕