Rescue decryption of the regular volumes is not affected by SED features in any significant way. The user must unlock SED before performing rescue decryption for the system to be able to recognize an encryption volume.

To perform rescue decryption of the boot volumes on locked SED one can use EFI recovery utility. The recovery utility, however, is only able to perform convenient rescue decryption of boot volumes after proper SED password has been provided.

Rescue decryption of the SED that is not used for boot process is no different from regular "Disable locking" SED command. Rescue decryption of SED that _is_ used in a boot process is only possible by means of Windows Recovery Environment or WinPE.

As a last resort, it is also possible to simply invalidate encryption keys in the disk controller by issuing "Revert using PSID" command in BCVE control panel. This will lead to complete data removal. The disk, however, can be further reinitialized and reused.


See also:

Overview of Rescue Procedures

Rescue Bootable CD and USB disks