End-user

Specops Key Recovery is a self-service solution for unlocking computers. If you are locked out at the pre-boot screen, you can use Specops Key Recovery to unlock your computer, without calling your organization’s helpdesk.

The below content will guide users through the enrollment and key recovery process.

Enrolling with Specops Key Recovery

Before you can use the solution, you will need to complete the enrollment process. Visit https://login.specopssoft.com to get started.

The enrollment process will vary depending on the identity services configured in the policy. To complete the enrollment, the user will need to collect enough stars to fill the star bar by selecting and providing the appropriate information for each identity service. Each identity service is marked with how many stars it is worth.

You can modify your enrollment at a later time from https://login.specopssoft.com. Note that in order to re-enroll with uReset, you will have to authenticate with your Windows identity, and at least one of identity services you have enrolled with previously.

Enrolling with Passkeys

The Passkeys identity service allows users to authenticate with Specops Authentication using the passkeys they have already set up on their device. Some examples of passkeys are Windows Hello, Yubikey, Bitwarden and any authentication app such as Google Authenticator.

Users have to enroll with each passkey separately.

  1. Go to the the login page and click Enroll
  2. Authenticate to enter the enrollment page.
  3. Select Passkeys.
  4. Give the passkey you want to enroll a friendly name so that you can easily recognize it.
  5. Click Add.
  6. A list with all available passkeys will be shown in a pop-up. Click on the passkey you want to add.
    NOTE
    Which passkeys will be shown depends partly on the platform you are currently on. Platform-specific passkeys (such as Windows Hello on your computer) will only be shown if you log in from that platform. Cross-platform passkeys will always be shown.
  7. Authenticate with the passkey.
NOTE
You can enroll a maximum of five passkeys.
NOTE
When authenticating with Passkeys, the list of passkeys will show all available passkeys for the platform you are on (both enrolled and not enrolled). Note that you can only use enrolled passkeys to authenticate with Specops Authentication.
NOTE
When authenticating with Passkeys, the authentication session will time out after 60 seconds.

Unlock a computer encrypted with Symantec Endpoint Encryption

If your organization uses Symantec Endpoint Encryption to protect computers, you will see the pre-boot authentication screen when you power on your computer.

If you have forgotten your password, the pre-boot authentication screen may display a URL to Specops Key Recovery. Alternatively, you can contact your administrator in order to obtain the URL.

  1. Browse to the provided Specops Key Recovery URL using a mobile device or another computer.
  2. Enter the email address associated with your corporate account, and click OK.
  3. Select one identity service at a time, and perform the corresponding authentication.
  4. Once you have identified yourself, you will be prompted to select the device you want to unlock. This is the computer you want to access. All computers you previously accessed from your account will be listed.
  5. Specops Key Recovery will ask you for a Sequence Number. To obtain the Sequence Number, press F4 on the computer you want to access, and it will enter Recovery Mode. When you are in Recovery Mode, the Sequence Number will be displayed.
  6. Enter the Sequence Number in Specops Key Recovery, and click Continue.
  7. A Response Key will be generated in Specops Key Recovery.
  8. Enter the Response Key on the computer, and click Enter.
  9. If your administrator has enabled a Challenge Key, you will need to complete steps 9 a-c:
    1. Click F5 on the computer and the Challenge Key will be displayed.
    2. In the Challenge Key field on Specops Key Recovery, enter the Challenge Key as it is displayed on your computer.
    3. Click Continue.
NOTE
Verify that the Challenge Key is correct by checking the letters and numbers inside the square brackets. If entered correctly, they will be the same.

Alt text for this image

Unlock a computer encrypted by Bitlocker (Managed by Symantec Endpoint Encryption)

  1. Browse to the provided Specops Key Recovery URL using a mobile device or another computer.
  2. Enter the email address associated with your corporate account, and click OK.
  3. Select one identity service at a time, and perform the corresponding authentication.
  4. Select Other computer.
  5. Specops Key Recovery will ask for a Bitlocker Recovery Key ID. To obtain the BitLocker Recovery Key ID, press ESC on the computer you are attempting to access. The Recovery Key ID will be listed at the bottom of the screen.
  6. Enter the Recovery Key ID in Specops Key Recovery, and click Continue.
  7. A Recovery Key will be generated in Specops Key Recovery.
  8. Enter the Recovery Key on the computer you want to unlock.

Unlock a computer encrypted by BitLocker

  1. Browse to the provided Specops Key Recovery URL using a mobile device or another computer.
  2. Enter the email address associated with your corporate account, and click OK.
  3. Select one identity service at a time, and perform the corresponding authentication.
  4. Specops Key Recovery will ask for a Bitlocker Recovery Key ID. To obtain the BitLocker Recovery Key ID, press ESC on the computer you are attempting to access. The Recovery Key ID will be listed at the bottom of the screen.
  5. Enter the Recovery Key ID in Specops Key Recovery, and click Continue.
  6. A Recovery Key will be generated in Specops Key Recovery.
  7. Enter the Recovery Key on the computer you want to unlock.