Surface Pro data recovery made easy: what you need to know
ฝัง
- เผยแพร่เมื่อ 28 ส.ค. 2024
- for data recovery call: 855.366.4232
or request your service here: www.hddrecovery...
Data recovery tools: www.acelab.eu.com
Data Recovery of Bitlocker Encrypted Surface Pro 6: Things You Must Know About
In today's video, we will be discussing options for data recovery of Surface Pro 6 devices that are encrypted with BitLocker. This can be a complex process, especially if the device has been disassembled or tampered with before. Our job is to recover data from the solid-state drive that runs the Surface Pro 6, which is actually soldered onto the logic board and not removable.
Since the unit is not removable, troubleshooting and diagnosing can become much more difficult. However, there are ways to tap into the SSD interface and recover the data. In this video, we will showcase a tool that can make the data recovery process cleaner, faster, and more efficient.
We will use a special NVMe adapter to link our Surface Pro 6 SSD with BitLocker to the PC3000 Portable III. This adapter transforms the connection of our soldered-on SSD into a standard m.2 NVMe interface, which solves the problem of connecting the device to the host.
However, we still need to be able to decrypt OEM BitLocker encryption that Microsoft engages on these SSDs. Our solution to decrypt BitLocker volume is to run an imaging task using a Data Extractor by Acelab, which is a part of the PC3000 complex. The Data Extractor is capable of handling and decrypting a lot of different types of OEM BitLocker encryptions, including HP and Dell.
In summary, recovering data from an encrypted Surface Pro 6 device can be a complex process. However, with the help of a special adapter and a Data Extractor, the process can become cleaner, faster, and more efficient. If you have lost your data on the Surface Pro and are looking for an effective solution to get it back, do not hesitate to contact us with your requests.
if you want to ship your failed device to us for data recovery and free evaluation, simply fill out this form: www.hddrecovery...
and send your drive boxed with bubble wrap to this address:
HDD Recovery Services
391 Bank St, Suite 201
Ottawa, ON
K2P 1Y3
Canada
Updated 2020 my gear for soldering:
I record all my videos using this HDMI Switcher: amzn.to/31LCsq6
Green inspection light amzn.to/2DFJoYu
Platter extractor: bit.ly/2YhQD2y
Momentary foot pedal switch amzn.to/2OSqjZF
Vacuum pump amzn.to/364XWxa
Cleanroom wipes: amzn.to/2ZLj49G
Programmer amzn.to/2DRjL7a
Quick pogo pin adapter for eepROM amzn.to/33TYVyO
Microscope: amzn.to/2rqWcwr
Vacuum chip pickup tool: amzn.to/2tNCSxc
Multimeter: amzn.to/2EHKAxO
USB volt/amp monitor: amzn.to/3CqLRmc
Microscope camera 21mp 60fps 1080P: amzn.to/2Rb5cUq
JBC precision soldering iron and tweezers: amzn.to/33MACm8
Hot air station: amzn.to/2K7Mztk
Infrared preheater: amzn.to/2rYCH1c
Fiberglass scratch pen: amzn.to/3uHIGUp
Flux dispenser: amzn.to/2spLw4D
BEST Flux: amzn.to/2mXJd1b
Wick: amzn.to/2mNr0Xh
Solder: amzn.to/2mtyC0a
Solder paste for BGA reballing: amzn.to/2LrKQCi
NAND BGA rebelling stencil amzn.to/33Oq9a5
Gloves: amzn.to/2mbHWDI
Fume Extractor (mine is no longer available but this is the new version of the same unit) : amzn.to/2mNCmL7
Gear for filming:
small camera: amzn.to/2mNw51T
big camera: amzn.to/2Ficg9o
Lens on big camera:amzn.to/2Cx3fGw
this video: • 3 best data recovery h...
Absolute genius, this guy saved my butt. Recently had a client bring in a dead drive, they were able to recover (and not lie about the issue and charge me 1k+). Really honest and professional!
Beautiful work as ever, I don't see to many surfaces with the pcie chips but always are a struggle.... that device made easy work.. well done
Great video! At last very detailed description of use PC3000!
Thank you! My surface pro 6 just fried out and I’m trying to recover all my files! ✨
Glad I could help!
OEM enabled bitlocker only uses a handful of keys??!! So how would one ensure that OEM keys aren't used? Do you have to decrypt, clear the TPM and then re-enable bitlocker? Your demo gives me reasons not to trust bitlocker at all and most certainly not OEM enabled encryption.
Same thought. I thought he at least would need the user password (I thought this was how bitlocker worked. User password + TPM) but apparently not.
Very thank you for sharing with us your knowledge:)
My pleasure!
Hello, Excellent video. Do you have an option to this adapter reader for SSD2 bga 291?
I’m curious: how did you learn about electronics and data recovery? Did you go to school for that or take an online course?
More likely on his own combined with curiosity. This guys is not an end user, he is repair, modifier and creator all in one.
The customer could provide you the bitlocker key… And if they signed in with a MS account then it's attached to their account and can grab the key that way as well.
I don't think so, it's not customer set key, it's OEM.
It would be curious to see if it saves the oem key in their account. It seems like if it didn't, and the customer somehow made BitLocker angry they would have no recourse to get their data back
I can’t believe how there hasn’t been a huge public discussion about this vulnerability. If bitlocker is being enabled by the factory they shouldn’t be using known keys. Should be random per device. At this point anyone with a factory bitlockered system should undo and redo it and get a new key.
The problem is that auto unlock was enabled, so the key needs to be stored somewhere. But still it is interesting that it is not in the TPM, maybe Microsoft doesn't trust their implementation and doesn't want to risk losing the key.
@@hddrecoveryservices how it possibile? Without private key?
Would this work on a surface that just shows the windows logo then turns off? Or is that an SSD failure?
That's an SSD failure. Won't work.
Simply love your workflow
Thanks my dude
My hard drive sata power port burned. 2 of the pins in the middle melted. What should i do?
If it was up to me I would just read out the eepRom with a programmer using a connection clip, and burn the contents into the donor board. Just replacement of the board is not going to work, rom needs to be cloned or moved
Hi
My surface pro has shut down after charging with an amazon charger. The unit sparked and shut down. I need to recover my files and photo's. Can you help please? Stephen
Hello, Thanks for this useful video. I just have a Surface pro5 that don't boot but Surface is working. I tried to boot with an usb key windows installer and the installer see the internal 256GB ssd. I have a PC3000 but the adapter is quiet expensive because i don't have many Surface to recover. Do you think it will work if i buy the adapter ?
Hard to say, you can get Toshiba ssd with same footprint and swap you chip on it. Make money off that case and buy a proper adapter for future 😄
Great work 👏
Crazy ! Nice tools !
Great video!
so basically if you want your data secure, they aren't doing you any favors by turning it on from the factory since it has a universal back door. I'm guessing that's not the case for if you turn it on manually yourself.
This would never work for individual keys 🔐
@@hddrecoveryservices yeah that's what I thought.
Sweet bro!
Not sure if connecting SIP NVME SSD to the interface should be considered as a recovery. BGA soldering skills, of course, but pc3k just makes it way slower compared to direcr m.2 method. Basically all you need is to find m.2 ssd with the same pinout and move chip from one place to another. Unlike apple SSD, MS uses quite generic stuff like kioxia bg4 on this video which is nothing but a embedded circuit 1to1 equal to what you find on m.2 board
I am actually just filming this ;) next episode Alexey
Excellent great stuff
Thank you
Hi guys, my mobile was broken and cpu was damaged emmc is not damaged.
Can we get data back from encrypted emmc Without cpu ic?
What is the price of pc3000???
Depends on configuration, it's a modular unit
@@hddrecoveryservices pc3000 UDMA
I just read that the base, HDD only is 11k and the full kit is 21k. Definitely made for data recovery companies.
Ca you provide link for bought the adapter, and there adapter for nano memory from USB flash drive... Thanks greatings from Portugal 🇵🇹 🌟
I am working on another video that will have an alternative method of dealing with this for a fraction of the cost. Wait till it comes out ( this week or next week) and then decide if you want to buy it. It's over $800USD and there is way to solve if for like 30$
@@hddrecoveryservices looking forward for the alternative way... thanks
Sir u can unlock bitlocker without key
Do you know of anyone in the US who renders this service? (Recovering data from an encrypted surface pro)
I don't, why guess if someone can do it and risk that that can't and having them mess it up more? We can do it for you. It's $700USD and it will take less than a week
Before I watch it... I bought a adapter to read the memories, but so far all I got was bitlocker encripted drives without key 😅
Wait what?
I can't do that, when TPM fails I have no access to the data 🤔
Will try this step by step tomorrow.
@@MordePT 😂
@@DiskTuna before you ask... I'm not talking about that 512 USB 😅
@@MordePT 😂
Please please please! I am begging you to please help me! For I have 2 micro SD cards that were corrupted and so I sent them to Pitt's Mobile data recovery and they said they couldn't fix it due to The severe logical damages. I seen your micro SD card video and I am hoping that you will be so kind to allow me to send the SD card's to you so that you can maybe fix it in a video. I don't have a lot of money especially because of the recovery service I sent it to but I'm just begging you to help me! I have videos on those SD cards that are extremely important to me .
Sure think. Requests are done on the website www.hddrecovery.ca/contact-us mention you found us on TH-cam
Surface Pro with 1TB, damn, they only sold me 512GB max for my 2700GBP
wait, so you're telling me bitlocker is effectively useless because they all use the same master key?
only if turned on by the manufacturer.
If you turn it on it will use a unique key.
No, the key is a OEM key, so it is not even set by client. Unique key will make intrusion impossible
@@hddrecoveryservices are you replying to me or U+1F98A?
No, it is just that encryption is not fully enabled yet.
All data on an disk is encrypted wih an symmetric key aka it is fast and is the same symmetric key to decrypt and encrypt data with...
The user then has an Asymmetric key pair (public/privat) and this type is slow but very stong, so the symmetric disk encryption key is encrypted with the users Asymmetric key.
So the bitlocker is enabled by OEM and then the disk IS encrypted but the symmetric key is stored on an readable open place on the disk until the user login and complete the bitlocker enabling process (automatic when login in with MS live or AD Azure account).
If you have an OEM PC and the bitlocker is enabled on the disk and the user has complete the process then you will see an "closed padlock icon" in Windows explore and if the user not yet has done the user side with Asymmetric key then the Windows explore icon for the drive an "open padlock"
I work with forensics and often get bitlocker encrypted disk images from OEM pc and if/when the user has not enabled the user side yet, then we can just mount the image as a drive
default recovery keys from OEMs is SUS as fuck.
Yeah pretty much no purpose other than to screw innocent people. I just happened to notice yesterday that my dell laptop had the C drive encrypted. I turned that off immediately. If I ever had to fix my filesystem I would have been screwed scouring the net hunting for the dell keys and some bs to decrypt it.
WOW! I did not know the OEMS used default bitlocker keys. Is there a site that has the default keys? Or does one need to be apart of the Illuminati? ;-)
Illuminati club bro :). I am not sure 100% how those keys are obtained, but if I had to guess they are hidden somewhere on the drive and data extractor just knows where to look for them. I may drop an answer to that in upcoming q&a this week. I'll consult with engineers at Acelab to see how they crack it
@@hddrecoveryservices So Bitlocker is enabled by default from the factory but they are in clear key mode. The key is stored in the MBR. If the user actually went through the setup process of Bitlocker, then this method will not work. The majority of users do not know this and do not actually setup Bitlocker.