Your home folder, which is protected by FileVault…Can't log in.

Question

Level 1

4 points

Your home folder, which is protected by FileVault…Can't log in.

After updating to 10.11.3 from 10.11.2, I get this error message: Your home folder, which is protected by FileVault, didn't open. It needs to be repaired. I clicked OK, but I can't log in, just get spinning wheel. Any solutions? I ran disk First Aid on hard drive after restarting in recovery mode, everything is OK. Also restarted in safe mode, but to no avail. Running on MacBook Pro 17in, 8G RAM.

~VIN,MacBook Pro (17-inch Mid 2010), OS X El Capitan (10.11.3)

Posted on Apr 12, 2016 7:08 PM

Reply

Answer 1

Linc Davis

Level 10

209,739 points

Apr 12, 2016 8:47 PM in response to ststok

You're using the "legacy" (pre-Lion) version of FileVault, and the disk image file on which your home folder is stored is corrupt.

This condition is quite difficult and time-consuming to recover from. If the procedure suggested here is too hard, please get help from someone more experienced. One option is to make a "Genius" appointment at an Apple Store.

Legacy FileVault is obsolete and should not be used under OS X 10.7 or later.

If you have another user account with administrator status and can do so, log in to it and skip to Step 4.

Step 1

Start up in Recovery mode. The OS X Utilities screen will appear.

Step 2

Select

Utilities ▹ Terminal

from the menu bar. In the window that opens, type this:

resetp

Press the tab key. The partial command you typed will automatically be completed to this:

resetpassword

Press return. A Reset Password window opens. Select your startup volume if not already selected. Pull down the menu labeled

Select the user account

and select

System Administrator (root)

Follow the prompts to set a password. It's safest to choose a password that includes only the characters a-z, A-Z, and 0-9.

Select

 ▹ Restart

from the menu bar.

Step 3

At the login screen, click Other... Enter "root" (without the quotes) in the Name field, and enter the password you set in Step 4 in the Password field. You should now be logged in. Do nothing while logged in as root except as indicated below.

Open the Users & Groups preference pane. Create a new user and check the box marked

Allow user to administer this computer

Restart and log in as the new user.

Step 4

Load this web page in Safari.

Triple-click anywhere in the line below on this page to select it:

sudo dscl . -delete users/fubar HomeDirectory

Copy the selected text to the Clipboard by pressing the key combination command-C.

Launch the TextEdit application. Paste into the window by pressing command-V. Double-click the word "fubar" and type the short name of the affected FileVault user.

To be clear, the command line above is just an example. You must edit it before using it.

Triple-click the edited line and again copy to the Clipboard.

Launch the built-in Terminal application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

Paste into the Terminal window. When prompted, enter the password of the user you're logged in as. Nothing will be displayed when you type it. Type carefully and then press return.

Step 5

You should now be able to log out and log in as the FileVault user. Your files still won't be available. FileVault is inactive.

Locate the disk image file named "fubar.sparsebundle" or "fubar.sparseimage" at the top level of your home folder. Again, these are only examples, not the actual name of the file you're looking for. Substitute the short user name for "fubar".

Step 6

Try to open the file. If it won't open, try to repair it in Disk Utility. If it still won't open, restore it from your most recent backup. Keep trying older backups until you find one that works. If you don't have a backup, the data is lost, perhaps beyond any hope of recovery. There's a slight chance that you might be able to repair the disk image using an expensive third-party application called "Disk Warrior." If possible, go to a "Genius Bar" where the software is available for use by the "Geniuses" at no charge.

Step 7

Copy the files from the mounted disk image to the corresponding subfolders of your home folder. The Library folder is invisible in the Finder. Open it by holding down the option key and selecting

Go ▹ Library

from the Finder menu bar. Open the copy on the disk image by selecting

Go ▹ Go to Folder

and entering something like

/Volumes/fubar/Library

in the text box that opens. Again, substitute the correct name for "fubar".

Log out and log back in.

If there isn't enough disk space available to complete this step, unmount the disk image, copy the disk image file to an external storage device, delete the original, and try again.

Step 8

Back up all data, then delete the disk image file.

Step 9

Delete the user you created in Step 3, if applicable.

Step 10 (optional, but recommended)

Follow the instructions in this support article under the heading "Disable the root user."

Reply

Answer 2

ststok Author

Level 1

4 points

Apr 12, 2016 10:23 PM in response to Linc Davis

Define "short name of the affected FileVault user." User's first name?

Thanks!

Sent from my iPhone

Reply

Answer 3

Linc Davis

Level 10

209,739 points

Apr 13, 2016 7:05 AM in response to ststok

The name of the home folder as it appears in the sidebar of a Finder window, for example.

Reply

Answer 4

ststok Author

Level 1

4 points

Apr 14, 2016 8:38 AM in response to Linc Davis

Linc,

Went to Apple Store yesterday to get help following the steps you suggested above. Unfortunately, the "geniuses" claim they aren't able to help in file recovery and aren't trained in Terminal. Fortunately I persisted, and they were able to "unlock" the disk image with the original password for the affected user. I carefully copied my files to an external hard drive (I hadn't backed up in 3 months, long story…). This included the Library of the affected user. I attempted to "copy the files from the mounted disk image to the corresponding subfolders of your home folder," but the hard drive wouldn't allow it. It was suspected the drive was failing. After running several diagnostics on the hard drive (including Storage Diagnostic) at the Apple Store, the results came back OK. Drive was erased and a OS reinstall was attempted. This was attempted several times, but failed each time (Capitan and Yosemite versions). Consensus by the "geniuses" was this confirmed the hard drive was failing and needed replacing.

New question: once the hard drive is replaced, is it a simple matter of copying over the Library? I can't seem to find it on the external HD anymore. I noticed it was "ghosted" in the directory list, but I know it exists. Is there a way to "reveal" it? Is it just hidden?

Thanks for your help

Reply

Answer 5

Linc Davis

Level 10

209,739 points

Apr 15, 2016 8:43 AM in response to ststok

Move your content to a new Mac - Apple Support

Reply

Answer 6

ststok Author

Level 1

4 points

Apr 21, 2016 10:37 AM in response to ststok

I ended up replacing the internal hard drive on my MacBook Pro. Went back to the Apple Store to get the OS installed (10.11.4), but things are worse now...kernel panics, apps restarting, windows closing randomly, screen going black. Can't even open Safari. This has been happening for several days now. The employee at the Genius Bar assured me that 10.11.4 was stable, but it's not on my machine. Below is the latest panic report. What do you suggest on how to fix? Thanks for your help!

Anonymous UUID: C9450AC4-F3CA-ED32-2D02-6549848D1BEF

Thu Apr 21 12:17:14 2016

*** Panic Report ***

panic(cpu 0 caller 0xffffff80127ce40a): Kernel trap at 0xffffff8012720225, type 14=page fault, registers:

CR0: 0x000000008001003b, CR2: 0xffffef8031c30400, CR3: 0x0000000009b8c005, CR4: 0x00000000000226e0

RAX: 0x0000000000000028, RBX: 0x0000000000000000, RCX: 0x0000000000000002, RDX: 0xffffff8016b01718

RSP: 0xffffff911dbb33c0, RBP: 0xffffff911dbb33f0, RSI: 0xffffff911dbb346c, RDI: 0xffffff8016b016c0

R8: 0xffffef8031c30400, R9: 0x0000000000000000, R10: 0xffffff911dbb3af8, R11: 0xffffff8031c3ad80

R12: 0xffffff911dbb346c, R13: 0xffffff8016b016c0, R14: 0xffffff8031c30000, R15: 0xffffff8016b016c0

RFL: 0x0000000000010287, RIP: 0xffffff8012720225, CS: 0x0000000000000008, SS: 0x0000000000000000

Fault CR2: 0xffffef8031c30400, Error code: 0x0000000000000000, Fault CPU: 0x0, PL: 1

Backtrace (CPU 0), Frame : Return Address

0xffffff911dbb3050 : 0xffffff80126dab12

0xffffff911dbb30d0 : 0xffffff80127ce40a

0xffffff911dbb32b0 : 0xffffff80127ec273

0xffffff911dbb32d0 : 0xffffff8012720225

0xffffff911dbb33f0 : 0xffffff801271f282

0xffffff911dbb3520 : 0xffffff801276bfaf

0xffffff911dbb3590 : 0xffffff801276d19d

0xffffff911dbb35d0 : 0xffffff8012bd9b90

0xffffff911dbb37c0 : 0xffffff80128fe137

0xffffff911dbb3850 : 0xffffff8012b00695

0xffffff911dbb3980 : 0xffffff8012b29197

0xffffff911dbb3b40 : 0xffffff8012b2952b

0xffffff911dbb3b80 : 0xffffff80128f1d49

0xffffff911dbb3cc0 : 0xffffff80129056f5

0xffffff911dbb3d10 : 0xffffff80128dceac

0xffffff911dbb3f10 : 0xffffff80128d6257

0xffffff911dbb3f60 : 0xffffff8012c27fa1

0xffffff911dbb3fb0 : 0xffffff80127eca76

BSD process name corresponding to current thread: mds

Mac OS version:

15E65

Kernel version:

Darwin Kernel Version 15.4.0: Fri Feb 26 22:08:05 PST 2016; root:xnu-3248.40.184~3/RELEASE_X86_64

Kernel UUID: 4E7B4496-0B81-34E9-97AF-F316103B0839

Kernel slide: 0x0000000012400000

Kernel text base: 0xffffff8012600000

__HIB text base: 0xffffff8012500000

System model name: MacBookPro6,1 (Mac-F22589C8)

System uptime in nanoseconds: 127851646974

last loaded kext at 31420142473: com.apple.driver.AudioAUUC 1.70 (addr 0xffffff7f94fb1000, size 32768)

loaded kexts:

com.apple.driver.AudioAUUC 1.70

com.apple.driver.AppleHWSensor 1.9.5d0

com.apple.driver.AppleTyMCEDriver 1.0.2d2

com.apple.driver.AGPM 110.21.18

com.apple.filesystems.autofs 3.0

com.apple.driver.AppleOSXWatchdog 1

com.apple.driver.AppleMikeyHIDDriver 124

com.apple.driver.AppleMikeyDriver 274.7

com.apple.driver.pmtelemetry 1

com.apple.iokit.IOUserEthernet 1.0.1

com.apple.driver.AppleUpstreamUserClient 3.6.1

com.apple.iokit.IOBluetoothSerialManager 4.4.4f4

com.apple.GeForceTesla 10.0.0

com.apple.driver.AppleHDAHardwareConfigDriver 274.7

com.apple.Dont_Steal_Mac_OS_X 7.0.0

com.apple.driver.AppleHDA 274.7

com.apple.driver.AppleIntelHDGraphics 10.0.0

com.apple.driver.AppleHV 1

com.apple.driver.AppleBacklight 170.8.9

com.apple.driver.AppleSMCPDRC 1.0.0

com.apple.nvidia.NVDAStartup 10.1.0

com.apple.driver.AppleMCCSControl 1.2.13

com.apple.iokit.BroadcomBluetoothHostControllerUSBTransport 4.4.4f4

com.apple.driver.AppleSMCLMU 208

com.apple.driver.AppleLPC 3.1

com.apple.driver.AppleMuxControl 3.12.6

com.apple.driver.ACPI_SMC_PlatformPlugin 1.0.0

com.apple.driver.AppleIntelHDGraphicsFB 10.0.0

com.apple.driver.AppleIntelSlowAdaptiveClocking 4.0.0

com.apple.driver.AppleFIVRDriver 4.1.0

com.apple.driver.SMCMotionSensor 3.0.4d1

com.apple.driver.AppleUSBTCButtons 245.4

com.apple.iokit.IOBluetoothUSBDFU 4.4.4f4

com.apple.driver.AppleUSBTCKeyEventDriver 245.4

com.apple.driver.AppleUSBTCKeyboard 245.4

com.apple.driver.AppleIRController 327.5

com.apple.driver.AppleFireWireStorage 3.7.1

com.apple.driver.initioFWBridge 3.7.1

com.apple.driver.IOFireWireSerialBusProtocolSansPhysicalUnit 3.7.1

com.apple.driver.LSI_FW_500 3.7.1

com.apple.driver.Oxford_Semi 3.7.1

com.apple.driver.StorageLynx 3.7.1

com.apple.driver.AppleFileSystemDriver 3.0.1

com.apple.AppleFSCompression.AppleFSCompressionTypeDataless 1.0.0d1

com.apple.AppleFSCompression.AppleFSCompressionTypeZlib 1.0.0

com.apple.BootCache 38

com.apple.iokit.SCSITaskUserClient 3.7.7

com.apple.iokit.IOAHCIBlockStorage 2.8.5

com.apple.driver.AirPort.Brcm4331 800.20.24

com.apple.driver.AirPort.Brcm4360 1040.1.1a6

com.apple.driver.AppleFWOHCI 5.5.2

com.apple.iokit.AppleBCM5701Ethernet 10.2.0

com.apple.driver.AppleAHCIPort 3.1.8

com.apple.driver.usb.AppleUSBEHCIPCI 1.0.1

com.apple.driver.usb.AppleUSBUHCIPCI 1.0.1

com.apple.driver.AppleSmartBatteryManager 161.0.0

com.apple.driver.AppleACPIButtons 4.0

com.apple.driver.AppleRTC 2.0

com.apple.driver.AppleHPET 1.8

com.apple.driver.AppleSMBIOS 2.1

com.apple.driver.AppleACPIEC 4.0

com.apple.driver.AppleAPIC 1.7

com.apple.driver.AppleIntelCPUPowerManagementClient 218.0.0

com.apple.nke.applicationfirewall 163

com.apple.security.quarantine 3

com.apple.security.TMSafetyNet 8

com.apple.driver.AppleIntelCPUPowerManagement 218.0.0

com.apple.AppleGraphicsDeviceControl 3.12.6

com.apple.kext.triggers 1.0

com.apple.iokit.IOSurface 108.2.1

com.apple.iokit.IOSerialFamily 11

com.apple.nvidia.classic.NVDANV50HalTesla 10.0.0

com.apple.nvidia.classic.NVDAResmanTesla 10.0.0

com.apple.driver.CoreCaptureResponder 1

com.apple.driver.DspFuncLib 274.7

com.apple.kext.OSvKernDSPLib 525

com.apple.iokit.IOFireWireIP 2.2.6

com.apple.driver.AppleSMBusController 1.0.14d1

com.apple.iokit.IOBluetoothHostControllerUSBTransport 4.4.4f4

com.apple.iokit.IOBluetoothFamily 4.4.4f4

com.apple.driver.AppleBacklightExpert 1.1.0

com.apple.iokit.IONDRVSupport 2.4.1

com.apple.driver.AppleGraphicsControl 3.12.6

com.apple.driver.IOPlatformPluginLegacy 1.0.0

com.apple.driver.IOPlatformPluginFamily 6.0.0d7

com.apple.iokit.IOSlowAdaptiveClockingFamily 1.0.0

com.apple.driver.AppleHDAController 274.7

com.apple.iokit.IOGraphicsFamily 2.4.1

com.apple.iokit.IOHDAFamily 274.7

com.apple.iokit.IOAudioFamily 204.3

com.apple.vecLib.kext 1.2.0

com.apple.driver.AppleSMBusPCI 1.0.14d1

com.apple.driver.AppleSMC 3.1.9

com.apple.iokit.IOSCSIBlockCommandsDevice 3.7.7

com.apple.driver.usb.IOUSBHostHIDDevice 1.0.1

com.apple.driver.AppleUSBMultitouch 250.5

com.apple.iokit.IOUSBHIDDriver 900.4.1

com.apple.iokit.IOFireWireSerialBusProtocolTransport 2.5.1

com.apple.iokit.IOFireWireSBP2 4.2.7

com.apple.driver.usb.cdc 5.0.0

com.apple.driver.usb.networking 5.0.0

com.apple.driver.usb.AppleUSBHostCompositeDevice 1.0.1

com.apple.driver.usb.AppleUSBHub 1.0.1

com.apple.iokit.IOSCSIMultimediaCommandsDevice 3.7.7

com.apple.iokit.IOBDStorageFamily 1.8

com.apple.iokit.IODVDStorageFamily 1.8

com.apple.iokit.IOCDStorageFamily 1.8

com.apple.driver.AppleXsanScheme 3

com.apple.iokit.IOAHCISerialATAPI 2.6.2

com.apple.iokit.IOSCSIArchitectureModelFamily 3.7.7

com.apple.driver.AppleUSBMergeNub 900.4.1

com.apple.iokit.IO80211Family 1110.26

com.apple.driver.corecapture 1.0.4

com.apple.iokit.IOFireWireFamily 4.6.0

com.apple.iokit.IOEthernetAVBController 1.0.3b3

com.apple.driver.mDNSOffloadUserClient 1.0.1b8

com.apple.iokit.IONetworkingFamily 3.2

com.apple.iokit.IOAHCIFamily 2.8.1

com.apple.iokit.IOUSBFamily 900.4.1

com.apple.driver.usb.AppleUSBUHCI 1.0.1

com.apple.driver.usb.AppleUSBEHCI 1.0.1

com.apple.iokit.IOUSBHostFamily 1.0.1

com.apple.driver.AppleUSBHostMergeProperties 1.0.1

com.apple.driver.AppleEFINVRAM 2.0

com.apple.driver.AppleEFIRuntime 2.0

com.apple.iokit.IOHIDFamily 2.0.0

com.apple.iokit.IOSMBusFamily 1.1

com.apple.security.sandbox 300.0

com.apple.kext.AppleMatch 1.0.0d1

com.apple.driver.AppleKeyStore 2

com.apple.driver.AppleMobileFileIntegrity 1.0.5

com.apple.driver.AppleCredentialManager 1.0

com.apple.driver.DiskImages 417.2

com.apple.iokit.IOStorageFamily 2.1

com.apple.iokit.IOReportFamily 31

com.apple.driver.AppleFDEKeyStore 28.30

com.apple.driver.AppleACPIPlatform 4.0

com.apple.iokit.IOPCIFamily 2.9

com.apple.iokit.IOACPIFamily 1.4

com.apple.kec.Libm 1

com.apple.kec.pthread 1

com.apple.kec.corecrypto 1.0

Reply