Technical support

Knowledgebase: Full Disk Encryption
How do I decrypt a system that only has UEFI boot mode?
Article ID: KB281 email a link to this article

Before you start the recovery procedure, please ensure that you are following the correct recovery article: 

Full Disk Encryption Recovery Overview


You are unable to use the Recovery ISO because your system does not have a Legacy mode option in the BIOS.

Examples include the Microsoft Surface devices.



The standard Recovery ISO is a 32bit version of Linux with limited hardware support.

Linux distributions only provide support for UEFI in their 64bit variants, which is why you need to use Legacy mode.



You may find that restoring from your backup is the quickest, and simplest, solution, however the guide below is provided so that you can decrypt a non-booting system.


The following instructions provide a way to use the 64bit version of Ubuntu and run the Recovery tool.

Note: As this is a Live CD environment, you will need to perform these instructions again if you need to reboot at all.


You will firstly need to download the following Ubuntu ISO from the link below:


Note: if the above link does not work, please let us know so we can provide an updated ISO.

The recovery tool, and instructions below, may not work on other version of Ubuntu or other flavours of Linux.

Note: ensure a full sector-by-sector backup of the existing hard drive has been taken before attempting recover.

See this article for details: KB70 - How do I perform a full sector by sector backup of my hard drive?


In addition, click the link below to view the Ubuntu guide which outlines the process of running Ubuntu from a USB memory stick.

You will now need to boot from the USB stick, this may require you to change the Boot settings in the BIOS.

On some devices, you may be required to hold down keys or buttons to access the BIOS. You should consult the devices instruction manual or manufacturers website.


This process requires a working internet connection, a keyboard and a mouse!


ESET can only provide very limited assistance and support regarding the use of Ubuntu itself.

If your system contains hardware devices, such as WiFi or Ethernet adapters, that are not supported by this version of Ubuntu, you may need to find alternative hardware that is supported.



When Ubuntu first boots, choose "Try Ubuntu without installing" as shown below

Try Ubuntu


Once at the Ubuntu Desktop, ensure your keyboard and mouse work.

If necessary, connect to a WiFi access point using the WiFi (fan shaped) icon near the top right corner of the screen.


Next, either press Ctrl + Alt + T to launch a Terminal window or click the Ubuntu icon in the top left corner, shown below

Ubuntu Icon

Then in the Search box that appears, type 'term' and press Return

Ubuntu Search


In the Terminal window, type wget and press Return

ubuntu@ubuntu : ~ $ wget

This will download a script file, displaying output similar to to the image below

Resolving (
Connecting to (||:80...
HTTP request sent, awaiting response... 200 OK
Length: 1321 (1.3K) [application/x-sh]
Saving to: ''              100%[=====================>]   1.29K  --.-KB/s   in 0s

2019-01-01 00:00:00 (91.1 MB/s) - '' saved [1321/1321]


Next, type bash and press Return

ubuntu@ubuntu : ~ $ bash

The Script will display the following text, followed by a lot of output as it downloads, installs and sets up required components.

Downloading ESET Endpoint Encryption Recovery Tool
Download successful
Downloaded file appears correct
Adding 32-bit Support
Updating Software DB

Once complete, you should see the following

Soft Linking libparted

Download script complete. Please continue following the KB article.


Now we can run the Recovery Tool.

Type sudo ./dlprecovery -s and press Return

ubuntu@ubuntu : ~ $ sudo ./dlprecovery -s

If everything was installed correctly, the Recovery Tool will run and you will see the following

ESET Endpoint Encryption FDE Recovery Tool
Version 1.10.0 (Build 42)
Copyright (c) ESET, spol. s r.o.

This software is bound by the standard Licence Agreement terms

Press Return to continue

From here, follow the on screen instructions to decrypt your device.

If the above did not work, please click here to view the Recovery Overview: KB346 - Full Disk Encryption Recovery Overview



We use cookies on our website to enhance your browsing experience. Read more