barubin
Level 1 (15 points)

Q: FileVault 2 "issue" with an encrypted thumbdrive

I encrypted a 64GB USB thumbdrive and when it wiggled loose from it's port without being unmounted first, the FV2 encryption no longer recognizes the original password.

 

  1. Is there a way to recover from this?
  2. Is there a way to reformat the device (64GB thumbdrives are not that cheap)? I've tried various versions of OS X, Linux, and Windoze XP but because it is locked I can't reformat (If I can find and install Windoze 98, would it recognize a thumbdrive as being locked?).

 

TIA.

Posted on Aug 7, 2013 8:36 AM

Close
barubin

Q: FileVault 2 "issue" with an encrypted thumbdrive

  • All replies
  • Helpful answers

  • by Scotch_Brawth,

    Scotch_Brawth Scotch_Brawth Aug 7, 2013 9:19 AM in response to barubin
    Level 3 (820 points)
    Aug 7, 2013 9:19 AM in response to barubin

    Encryption just stops you mounting the partition, but the drive itself still appears in Disk Utility.  If you click on the drive in Disk Utility and choose erase, it should let you continue.

  • by barubin,

    barubin barubin Aug 7, 2013 10:23 AM in response to Scotch_Brawth
    Level 1 (15 points)
    Aug 7, 2013 10:23 AM in response to Scotch_Brawth

    Scotch_Brawth,

     

    Yes, I thought it should also,

     

    I can see the device in DU and muliple partitions (thanks to TinkerToy) and even run First Aid (until it has an error) but that is the ONLY action I can execute on it in DU.

  • by Eric Root,

    Eric Root Eric Root Aug 7, 2013 12:29 PM in response to barubin
    Level 9 (71,180 points)
    iTunes
    Aug 7, 2013 12:29 PM in response to barubin

    In Disk Utility try control - clicking the drive and see if it will accept the password.

  • by etresoft,

    etresoft etresoft Aug 7, 2013 12:37 PM in response to barubin
    Level 7 (29,178 points)
    Mac OS X
    Aug 7, 2013 12:37 PM in response to barubin

    You should always be able to repartition the drive. You will lose all of the data of course.

  • by barubin,

    barubin barubin Aug 7, 2013 6:57 PM in response to Eric Root
    Level 1 (15 points)
    Aug 7, 2013 6:57 PM in response to Eric Root

    Eric,

     

    Nope.

     

    Thanks for the suggestion.

  • by barubin,

    barubin barubin Aug 7, 2013 7:10 PM in response to etresoft
    Level 1 (15 points)
    Aug 7, 2013 7:10 PM in response to etresoft

    etresoft,

     

    I wish it was true.

     

    When I try to run First Aid I get the following:

     

    Verify and Repair volume “disk2s1”

    Repairing volume failed: Unrecognized file system.

     

     

    Verify and Repair volume “Step1”

    Checking storage systemChecking volume.

    disk2s2: Scan for Volume Headers

    disk2s2: Scan for Disk Labels

    Logical Volume Group 7CCA7A5F-C634-4113-B082-4E797A07007C on 1 device

    disk2s2: Scan for Metadata Volume

    Logical Volume Group has a 16 MB Metadata Volume with double redundancy

    Start scanning metadata for a valid checkpoint

    Load and verify Segment Headers

    Load and verify Checkpoint Payload

    Load and verify Transaction Segment

    Incorporate 0 newer non-checkpoint transactions

    Load and verify Virtual Address Table

    Load and verify Segment Usage Table

    Load and verify Metadata Superblock

    Load and verify Logical Volumes B-Trees

    Logical Volume Group contains 1 Logical Volume

    Load and verify 7963749D-B2EB-4358-894C-77505E33025C

    Load and verify 5F166B75-4720-45C3-B5D7-84A395A2AED2

    Load and verify Freespace Summary

    Load and verify Block Accounting

    Load and verify Live Virtual Addresses

    Newest transaction commit checkpoint is valid

    Load and verify Segment Cleaning

    The volume 7CCA7A5F-C634-4113-B082-4E797A07007C appears to be OK.

     

    Verify and Repair volume “Boot OS X”

    Checking file systemChecking Journaled HFS Plus volume.

    Checking extents overflow file.

    Checking catalog file.

    Checking multi-linked files.

    Checking catalog hierarchy.

    Checking extended attributes file.

    Checking volume bitmap.

    Checking volume information.

    The volume Boot OS X appears to be OK.

     

    Verify and Repair volume “XFR”

    Checking storage systemChecking volume.

    disk2s2: Scan for Volume Headers

    disk2s2: Scan for Disk Labels

    Logical Volume Group 7CCA7A5F-C634-4113-B082-4E797A07007C on 1 device

    disk2s2: Scan for Metadata Volume

    Logical Volume Group has a 16 MB Metadata Volume with double redundancy

    Start scanning metadata for a valid checkpoint

    Load and verify Segment Headers

    Load and verify Checkpoint Payload

    Load and verify Transaction Segment

    Incorporate 0 newer non-checkpoint transactions

    Load and verify Virtual Address Table

    Load and verify Segment Usage Table

    Load and verify Metadata Superblock

    Load and verify Logical Volumes B-Trees

    Logical Volume Group contains 1 Logical Volume

    Load and verify 7963749D-B2EB-4358-894C-77505E33025C

    Load and verify 5F166B75-4720-45C3-B5D7-84A395A2AED2

    Load and verify Freespace Summary

    Load and verify Block Accounting

    Load and verify Live Virtual Addresses

    Newest transaction commit checkpoint is valid

    Load and verify Segment Cleaning

    The volume 7CCA7A5F-C634-4113-B082-4E797A07007C appears to be OK.

    Checking file systemJournal need to be replayed but volume is read-only

    Checking Journaled HFS Plus volume.

    Checking extents overflow file.

    Unused node is not erased (node = 5)

    Checking catalog file.

    Invalid key length

    The volume XFR could not be verified completely.

    Error: Disk Utility can’t repair this disk. Back up as many of your files as possible, reformat the disk, and restore your backed-up files.

     

    And when I try a technique that help someone else with a similar problem it fails for me:

     

    Hard disk bricked after using file vault with time machine

    Last login: Wed Aug  7 21:35:16 on console

    membp:~ me$ diskutil cs list

    CoreStorage logical volume groups (2 found)

    |

    +-- Logical Volume Group A8A859A6-BD6D-4D3A-AB02-D59396DC937C

    |   =========================================================

    |   Name:         Mountain_Lion

    |   Status:       Online

    |   Size:         319213174784 B (319.2 GB)

    |   Free Space:   16777216 B (16.8 MB)

    |   |

    |   +-< Physical Volume C8D71655-A4E8-42BB-B342-DD1B0A012731

    |   |   ----------------------------------------------------

    |   |   Index:    0

    |   |   Disk:     disk0s2

    |   |   Status:   Online

    |   |   Size:     319213174784 B (319.2 GB)

    |   |

    |   +-> Logical Volume Family 821F1825-068F-4259-B8AF-DEDF726F604D

    |       ----------------------------------------------------------

    |       Encryption Status:       Unlocked

    |       Encryption Type:         AES-XTS

    |       Conversion Status:       Complete

    |       Conversion Direction:    -none-

    |       Has Encrypted Extents:   Yes

    |       Fully Secure:            Yes

    |       Passphrase Required:     Yes

    |       |

    |       +-> Logical Volume 955CBA0C-A36A-4EFD-ABA9-501E6FBA2097

    |           ---------------------------------------------------

    |           Disk:               disk1

    |           Status:             Online

    |           Size (Total):       318877626368 B (318.9 GB)

    |           Size (Converted):   -none-

    |           Revertible:         Yes (unlock and decryption required)

    |           LV Name:            Mountain_Lion

    |           Volume Name:        Mountain_Lion

    |           Content Hint:       Apple_HFS

    |

    +-- Logical Volume Group 7CCA7A5F-C634-4113-B082-4E797A07007C

        =========================================================

        Name:         Step1

        Status:       Online

        Size:         65108008960 B (65.1 GB)

        Free Space:   0 B (0 B)

        |

        +-< Physical Volume 7C052084-C46F-440C-80DC-DEBD9874D38D

        |   ----------------------------------------------------

        |   Index:    0

        |   Disk:     disk2s2

        |   Status:   Online

        |   Size:     65108008960 B (65.1 GB)

        |

        +-> Logical Volume Family 7963749D-B2EB-4358-894C-77505E33025C

            ----------------------------------------------------------

            Encryption Status:       Unlocked

            Encryption Type:         AES-XTS

            Conversion Status:       Complete

            Conversion Direction:    -none-

            Has Encrypted Extents:   Yes

            Fully Secure:            Yes

            Passphrase Required:     Yes

            |

            +-> Logical Volume 5F166B75-4720-45C3-B5D7-84A395A2AED2

                ---------------------------------------------------

                Disk:               disk3

                Status:             Online

                Size (Total):       64789233664 B (64.8 GB)

                Size (Converted):   -none-

                Revertible:         No

                LV Name:            XFR

                Volume Name:        XFR

                Content Hint:       Apple_HFS

    membp:~ me$ sudo diskutil cs deleteLVG 7963749D-B2EB-4358-894C-77505E33025C

    Password:

    Error deleting CoreStorage Logical Volume Group: Not a valid CoreStorage Logical Volume Group UUID (-69778)

    membp:~ me$

  • by g_wolfman,

    g_wolfman g_wolfman Aug 7, 2013 7:21 PM in response to barubin
    Level 4 (1,141 points)
    Aug 7, 2013 7:21 PM in response to barubin

    etresoft didn't say you could repair the drive; he said repartition.

     

    As in erase and then rebuild a new partition table, effectively destroying the existing file system and starting fresh.  Your data will be lost (but it appears to be lost anyway due to the encryption key being corrupted (or at least unrecognized))...but you will be able to use the drive again.

  • by barubin,

    barubin barubin Aug 8, 2013 7:00 AM in response to g_wolfman
    Level 1 (15 points)
    Aug 8, 2013 7:00 AM in response to g_wolfman

    g_wolfman,

     

    "Sorry about that Chief."

     

    I didn't specify that the ONLY DU operation I can execute on any of the device's partitions is First Aid. I cannot erase, repartition, etc.

     

    I've accepted that the data is lost (I have the originals so that isn't a problem) and I just want to have the use of my 64GB drive again.

  • by etresoft,

    etresoft etresoft Aug 8, 2013 7:20 AM in response to barubin
    Level 7 (29,178 points)
    Mac OS X
    Aug 8, 2013 7:20 AM in response to barubin

    I see you what you mean. What you have to do is select the encrypted volume in Disk Utility. Then choose the "Erease" tab. In the Format pop-up menu, change from "MacOS Extended (Journaled, Encrypted)" to "MacOS Extended (Journaled)". Then click the Erase button. That should do it.

  • by g_wolfman,

    g_wolfman g_wolfman Aug 8, 2013 6:21 PM in response to barubin
    Level 4 (1,141 points)
    Aug 8, 2013 6:21 PM in response to barubin

    Ah, I see...like etresoft says in his last response, then; that should work.

     

    Cheers,