Intel RAID 0 BitLocker

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
an3k
Posts: 3
Joined: 20 Oct 2024, 09:24

Intel RAID 0 BitLocker

#1 Post by an3k »

Good day,

I have two M.2 SSDs configured in a RAID 0 using Intel RST. On that drive was a single BitLocker partition used as a secondary data volume. I followed the steps mentioned here but it doesn't work. TestDisk finds nothing. I assume because of BitLocker. Or maybe because I booted into Windows without removing the Intel RST driver, which is not possible because the OS Disk is also a RAID. I was not able to see the RAID Volume but the contents of the "non-member disk" (three partitions and 99% unallocated space). Interestingly the boot RAID drive has not lost a member disk, just the data RAID drive.

So, my question is: How to recover Intel RAID data on a bitlocker drive? Or is it already too late?

EDIT: After more than 12 hours of a quick analyze it found something:

Code: Select all

TestDisk 7.2, Data Recovery Utility, February 2024
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org

Disk \\.\PhysicalDrive1 - 8001 GB / 7452 GiB - CHS 972802 255 63                                                        
Analyse cylinder 87783/972801: 09%


  MS Data                     4224    1087615    1083392                                                                  
  BeFS                   282952429 7104808843291417 7104808560338989 [ h^P˦)M-7M-v~A^?M-+M-&~OdV^KM-~M-$PM-n lT}^V      
check_FAT: Bad number of sectors per cluster                                                                              
  Unknown                517864456 4159697859 3641833404                                                                
check_FAT: Bad jump in FAT partition                                                                                      
  Linux filesys. data    812128968  814545571    2416603 [^LM-!^\^PM-.                                                  
xO^Rl~[;1^?t]



Stop
Last edited by an3k on 20 Oct 2024, 16:45, edited 1 time in total.
Top
recuperation
Posts: 3026
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: Intel RAID 0 BitLocker

#2 Post by recuperation »

TestDisk only supports some linux RAID structures.

Your post does not contain a proper case description which would explain how your system worked and what is different now.
Top
an3k
Posts: 3
Joined: 20 Oct 2024, 09:24

Re: Intel RAID 0 BitLocker

#3 Post by an3k »

Sorry for missing the case description.
My laptop runs Windows 11 but I have a lot of issues. Wanted to install Windows 10 because I bet the issues were because of Windows 11. I removed all four M.2 SSDs (2x 2TB in RAID0 as boot drive and system + 2x 4TB in RAID0 as data drive), installed a different M.2, tried to install Windows 10 which failed (no drive visible), disabled Intel RST and installed Windows 10 (worked now). Laptop works fine with Windows 10 but because I don't have time to do the migration now -> I removed the new M.2, installed the previous M.2s again and made sure to put them in the very same slots they were before, re-enabled Intel RST and booted. Windows 11 loaded perfectly fine and I had my C: in good condition. But D: was missing a size info and I additionally got E: and F:. Checked disk manager and Intel Optane software and saw that I do not have the raid but a single 4TB M.2 (the previous data RAID0 member-disk).
Top
an3k
Posts: 3
Joined: 20 Oct 2024, 09:24

Re: Intel RAID 0 BitLocker

#4 Post by an3k »

I kept it runing and currently it's showing this. Does it look saveable or is all lost?

Code: Select all

TestDisk 7.2, Data Recovery Utility, February 2024                                                                      
Christophe GRENIER <grenier@cgsecurity.org>                                                                             
https://www.cgsecurity.org                                                                                                                                                                                                                      

Disk \\.\PhysicalDrive1 - 8001 GB / 7452 GiB - CHS 972802 255 63                                                        
Analyse cylinder 440035/972801: 45%                                                                                                                                                                                                                                                                                                                                       

  MS Data                     4224    1087615    1083392                                                                  
  BeFS                   282952429 7104808843291417 7104808560338989 [ h^P˦)M-7M-v~A^?M-+M-&~OdV^KM-~M-$PM-n lT}^V      
check_FAT: Bad number of sectors per cluster                                                                              
  Unknown                517864456 4159697859 3641833404                                                                
check_FAT: Bad jump in FAT partition                                                                                      
  Linux filesys. data    812128968  814545571    2416603 [^LM-!^\^PM-.                                                  
xO^Rl~[;1^?t]                                                                                                           
check_FAT: Bad jump in FAT partition                                                                                    
check_FAT: Bad number of sectors per cluster                                                                              
  Unknown               1999880959 2525510139  525629181                                                                
check_FAT: Bad jump in FAT partition                                                                                      
  Linux filesys. data   2805228689 2806234440    1005751 [-~WM-;]M-'qsdM-$~SM-wWvM-%                                    
check_FAT: Bad number of sectors per cluster                                                                              
  Unknown               4264661750 797593974182645 797589709520896 [ }M-=M-x~N]                                           
  Unknown               4275158093 17792746028 13517587936 [ʑF 7]                                                         
  Unknown               4520489340 2995225113979 2990704624640
Top
Locked

Return to “Partition Recovery”