After Windows update, the machine is rebooted and cannot load to Windows OS.
If the machine is not encrypted by Check Point Full Disk Encryption Blade, the system will go to 'System Repair', which cannot succeed saying that psg.sys driver is corrupted.
If Check Point Full Disk Encryption Blade is installed and the machine is encrypted, the 'Startup Repair' window appears and it fails with a message about disk corruption.
During the upgrade of Endpoint Security from R7X to E80.X version, while Windows update KB2949927 is installed, the system will go to 'System Repair' window.
We are distinguishing between machines not encrypted by Full Disk Encryption Blade and encrypted by Full Disk Encryption Blade as appears in the symptoms above.
Check Point GO application crashes while authenticating with Check Point GO USB stick to a machine with Windows update KB2949927 installed.
Microsoft software update KB2949927 was released on October 14th, 2014 and was delivered with automatic Windows updates.
This KB2949927 causes the issue if Endpoint Security Media Encryption is installed.
Follow these steps to recover the Check Point Endpoint Security Media Encryption computer with Windows update KB2949927 installed on Windows 7.
Important Note: Reverting the changes on the affected machines with installed Endpoint Security does not affect the Check Point software and configuration.
Burn the special bootable ISO file on a CD, or copy it to a USB storage device.
Important Note: The recovery file of the affected machine will be required - either add the recovery file to this ISO file / USB storage device, or copy the recovery file to an additional storage device (such as USB drive).
Boot the Windows machine using the Check Point special bootable image.
Important Note: Make sure that the recovery file of the affected machine is available - either on the same bootable media, or insert an additional storage device (such as USB drive) before booting the machine.
When the command line appears, run the Full Disk Encryption 'Dynamic Mount Utility':
C:\> cd /
C:\> cd "Program Files"
C:\> cd "fde_dmu"
In the "Dynamic Mount Utility", double click on the \\.\PhysicalDrive... to unlock the drive.
In case of authentication issue, use the "recovery file" and then try unlocking the drive again.
Make sure that the partition is unlocked.
The unlocked drive should be displayed as "Unprotected or unlocked".
Use the DISKPART utility to determine the system drive letter (where the Windows OS is installed):
Run the diskpart utility:
Get the list of the volumes:
DISKPART> list volume
Find the system drive letter (where the Windows OS is installed) - look at the "Ltr" column. Usually, when Windows OS is installed on drive C:, it will appear as drive D: while using WinPE and DMU (drive C: is displayed as 'System Reserved' in the "Label" column).
Exit from the diskpart utility:
Revert changes made by installing KB2949927:
In case Windows OS is installed on partition "C:", run this command (note that drive letter is "D:"):