User avatar
Jared
Forum Admin
Posts: 3492
Joined: Mon Jan 12, 2015 12:32 pm
Location: Providence, RI
Contact: Website Facebook Twitter Skype YouTube Google+

Surface 3 Data Recovery

Tue Aug 23, 2016 10:14 am

So yesterday I got in a Surface 3 which uses eMMC instead of an SSD for its memory. The device was functional, but data had been accidentally deleted. I tried a number of Linux live builds but most would hang on boot. Finally, I was able to image it using a bootable copy of Clonezilla. Here's the steps I followed to image the memory w/o having to boot up the tablet to Windows.

1. Using Lili USB creator software I set up a bootable USB thumb drive with Clonezilla.
2. With the tablet off, hold the Volume Up key and power the tablet on (this will enter UEFI) and then disable the secure boot option.
3. Turn the tablet back off by holding the power key for around 10 seconds.
4. Plug in the USB stick along with wireless keyboard/mouse dongle into USB hub, and plug hub into the tablet.
5. Hold the Volume Down button and power the tablet on (it should boot to Clonezilla)
6. Plug in destination USB drive to hub as well, and follow the Clonzilla instructions on screen.
7. Had customer log into their Microsoft account and get bitlocker key using this link (http://go.microsoft.com/fwlink/?LinkId=237614)

I was quite impressed that the tablet was able to power a WD My Passport drive as well as the thumb drive and keyboard dongle for the entire 45min it took to image the whole drive, all running on battery using a non-powered hub (I tried a powered one and it was acting up for some reason). Hopefully, this will help someone else trying to get an image of the memory from one of these.

User avatar
pclab
Forum Moderator
Posts: 1591
Joined: Tue Jan 13, 2015 4:55 pm
Contact: Website Facebook

Surface 3 Data Recovery

Wed Aug 24, 2016 3:42 am

Thanks Jared.
www.pclab.com.pt
facebook.com/PCLAB.Assistencia.Tecnica

abedalkareem
Data Recovery Novice
Posts: 199
Joined: Mon Aug 31, 2015 12:57 pm

Surface 3 Data Recovery

Wed Aug 24, 2016 4:30 am

thanks for sharing

User avatar
Jared
Forum Admin
Posts: 3492
Joined: Mon Jan 12, 2015 12:32 pm
Location: Providence, RI
Contact: Website Facebook Twitter Skype YouTube Google+

Surface 3 Data Recovery

Wed Aug 24, 2016 4:15 pm

Another interesting thing I discovered is that I can't do a drive to drive image of the internal memory. I can only image to a file, and only by partition. Seems that if I try to image starting at the MBR it returns an error about the eMMC memory not being a block device. Yet I can read to an image file. Even after I had the image when I ran R-Studio on the device to test it, I still couldn't image the whole drive to another drive. But I could to an image file.

User avatar
Blizzard
Experienced DR Tech
Posts: 242
Joined: Fri Jun 24, 2016 12:06 am
Location: GA - USA
Contact: Website Facebook Twitter

Surface 3 Data Recovery

Wed Aug 24, 2016 8:46 pm

This is some great info. Thanks for sharing!

User avatar
w.simon
Forum Moderator
Posts: 147
Joined: Wed Jan 14, 2015 11:41 am
Location: France
Contact: Website Facebook Twitter Google+

Surface 3 Data Recovery

Thu Aug 25, 2016 6:59 am

Thanks i keep it in memory :)
A.G.D.I Data Recovery in France
Dolphin Data Lab Official Partner
Récupération de Données

User avatar
LarrySabo
Data Recovery Master
Posts: 845
Joined: Mon Jan 12, 2015 8:15 pm
Location: Ottawa, Canada
Contact: Website

Surface 3 Data Recovery

Wed Nov 23, 2016 7:56 pm

Had customer log into their Microsoft account and get bitlocker key using this link (http://go.microsoft.com/fwlink/?LinkId=237614)

I had a call today about recovering data from a Surface Pro 3 that prompts for the user's bitlocker key, which the customer has never been asked for before. He said he contacted MS to see if they could provide his private key, and provided them with the Key ID provided by the Surface. They said if he didn't back it up at set-up, they couldn't help. All he gets is an option to 1) reset the device, 2) boot to a USB drive, or 3) boot to a command prompt. He needs his data recovered.

@jared, should the private key always be available using that link (assuming the Surface was set up using a MS account)?

User avatar
Jared
Forum Admin
Posts: 3492
Joined: Mon Jan 12, 2015 12:32 pm
Location: Providence, RI
Contact: Website Facebook Twitter Skype YouTube Google+

Surface 3 Data Recovery

Wed Nov 30, 2016 2:10 pm

Yes, it should be available. When the key is created on first login the bitlocker key is stored with Microsoft and linked with their account.

User avatar
LarrySabo
Data Recovery Master
Posts: 845
Joined: Mon Jan 12, 2015 8:15 pm
Location: Ottawa, Canada
Contact: Website

Surface 3 Data Recovery

Wed Nov 30, 2016 7:33 pm

Thanks, Jared. That's what I figured and tried to contact the (prospective) customer to begin next steps, but he wasn't available and hasn't replied to the voice message I left.

Return to “Phones, Tablets, and Other Device Data Recovery”

Who is online

Users browsing this forum: No registered users and 0 guests