Hi
Has anyone had any success running EnCase in VMware?
I would like to create a number of virtual machines running dongle required software (FTK, EnCase … etc).
I would like to share the dongles over the network, ideally putting them all in one server and share the dongles over the network using software like…
http//
…this works fine with FTK but EnCase does not properly detect the dongle.
Is this a known issue for sharing the EnCase dongle over the network or is this a EnCase issue running in VMware?
Any thoughts would be appreciated
Kind Regards
Matt
I was using EnCase via a Windows 7 VM session not that long ago when I was doing some research work and didn't have any problems. The VM session was able to see the EnCase dongle and EnCase recognized it without any problems.
Thats interesting… what was the virtualisation application you use, were you using vmware workstation?
Were you running VMware workstation ontop of a Windows 7 platform?
I am attempting to run several vms of an ESX server
These EnCase related questions - what was the response from EnCase support or on their forums?
I have posted the same question to the EnCase support forum so see if anyone has experienced similar problems or knows what the fix would be.
Thats interesting… what was the virtualisation application you use, were you using vmware workstation?
Were you running VMware workstation ontop of a Windows 7 platform?
I am attempting to run several vms of an ESX server
The host OS was just a standard Windows XP SP3 installation using VMware Workstation. The guest OS was Windows 7 Home Premium.
I was just doing some file system tunneling research for the Adobe Flash Cookie project I'm working on with Kristinn. I only spent maybe 90 minutes to two hours using this setup so if there are any issues that would have materialized after that, I wouldn't have seen it.
Just attempted with VMware workstation… you are right it does work.
It must be an ESX issue.
I have posted the same question to the EnCase support forum so see if anyone has experienced similar problems or knows what the fix would be.
You should call Guidance UK support direct, they'll give you the definitive answer there and then.
One thing I can say about trade-marked 'World Leader in Digital Investigations' ( roll ) is that they do have excellent support.
On Windows to Windows workstation I do use it all the time.
Was contemplating a similar set up from the OP for a client environment… I do have issues using EnCase with RDP - I like to remote in to my forensic station from my workstation but have to open EnCase first on the forensic station or it won't see the dongle if just opened in RDP session. Wondering if there is some similar issues at play in the VM.
On the ESX server can it see the Aladdin HASP key as a device?
I am sharing the usb dongle over the network using "USB Over Network"
http//
This works really well for FTK, and works perfectly when sharing the EnCase dongle "physical machine to physical machine". Just not so well whilst sharing to a virtual machine.
Thats quite interesting about "open EnCase first on the forensic station or it won't see the dongle if just opened in RDP session." I will give that one a go and let you know how it goes. Thanks for that.