1DISLOCKER(1)                       DISLOCKER                      DISLOCKER(1)
2
3
4

NAME

6       Dislocker  file - Read BitLocker encrypted volumes under Linux, OSX and
7       FreeBSD.
8

SYNOPSIS

10       dislocker-file [-hqrsv] [-l LOG_FILE] [-O OFFSET] [-V  VOLUME  DECRYPT‐
11       METHOD -F[N]] [--] NTFS_FILE
12
13       Where   DECRYPTMETHOD   =   {-p[RECOVERY_PASSWORD]   |  -f  BEK_FILE  |
14       -u[USER_PASSWORD] | -k FVEK_FILE | -c}
15

DESCRIPTION

17       Given a decryption mean, the  program  is  used  to  decrypt  BitLocker
18       encrypted volumes.
19
20       This process may take a very long time, depending on the initial volume
21       size, as the program will decrypt  the  encrypted  partition  linearly.
22       About  this  size,  note that the created NTFS file will be of the same
23       size as the BitLocker encrypted partition, so you  may  want  to  check
24       that  you  have  enough free space on the volume where you put the NTFS
25       file.
26
27       This NTFS  file  won't  have  any  link  with  the  original  BitLocker
28       encrypted partition, so you may modify it to suit your needs.
29

OPTIONS

31       For  program's  options  description,  see  dislocker-fuse(1). The only
32       change in the command line is the last argument, which in this case  is
33       the NTFS_FILE argument:
34
35       NTFS_FILE  the  newly created file where NTFS data will be put to, once
36       decrypted from the BitLocker encrypted volume.
37

EXAMPLES

39       These are examples you can run directly.
40
41       Dislock the BitLocker encrypted volume:
42
43              %              dislocker              -V               /dev/sda2
44              -p563200-557084-108284-218900-019151-415437-694144-239976     --
45              decrypted.ntfs
46
47              This will decrypt /dev/sda2 into decrypted.ntfs using the recov‐
48              ery password method.
49
50       To mount the partition once decrypted, use this sort of line:
51              % mount -o loop decrypted.ntfs /mnt/clear
52
53       --
54
55       You  may  have to unmount the NTFS partition before halting the system.
56       In order to do so, you may  run  this  command  (replacing  your  mount
57       point):
58              % umount /mnt/clear
59
60       --
61
62       Note  that  these are examples and, as such, you may need to modify the
63       given command lines. For example, you may want to change the decryption
64       method used in them.
65

AUTHOR

67       This   tool   is   developed   by   Romain  Coltel  on  behalf  of  HSC
68       (http://www.hsc.fr/)
69
70       Feel free to send bugs report to <dislocker __AT__ hsc __DOT__ fr>
71
72
73
74Linux                             2011-09-07                      DISLOCKER(1)
Impressum