All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 20 posts ] 
Author Message
 Post subject: Filevault 1 encrypted user folder decryption on pc3000
PostPosted: February 7th, 2019, 14:27 
Offline

Joined: February 28th, 2011, 21:04
Posts: 187
Location: United Kingdom
Anyway to decrypt a filevault 1 encrypted folder through pc3k? Dying media that probably wont make it through a clone.


Top
 Profile  
 
 Post subject: Re: Filevault 1 encrypted user folder decryption on pc3000
PostPosted: February 7th, 2019, 14:41 
Offline
User avatar

Joined: April 3rd, 2011, 0:19
Posts: 1911
Location: Providence, RI
Google is your friend:

https://blog.acelaboratory.com/pc-3000- ... crypt.html

_________________
Data Medics - Hard Drive, SSD, and RAID Data Recovery Service Company


Top
 Profile  
 
 Post subject: Re: Filevault 1 encrypted user folder decryption on pc3000
PostPosted: February 7th, 2019, 14:50 
Offline

Joined: February 28th, 2011, 21:04
Posts: 187
Location: United Kingdom
It is indeed, and I have used that method to decrypt quite a few Filevault 2 partitions, unfortunately this is a Filevault 1 encrypted folder and that doesn't work as far as I can tell.


Top
 Profile  
 
 Post subject: Re: Filevault 1 encrypted user folder decryption on pc3000
PostPosted: February 7th, 2019, 15:32 
Offline

Joined: December 10th, 2018, 11:56
Posts: 31
Location: Ukraine
Did you try to use UFS Explorer/Recovery Explorer with steps like that https://youtu.be/tYbTtHuINzI ?


Top
 Profile  
 
 Post subject: Re: Filevault 1 encrypted user folder decryption on pc3000
PostPosted: February 7th, 2019, 15:42 
Offline
User avatar

Joined: September 29th, 2005, 12:02
Posts: 3271
Location: Chicago
kpeddie wrote:
Anyway to decrypt a filevault 1 encrypted folder through pc3k? Dying media that probably wont make it through a clone.

No, there is no way to decrypt FileVault1 through PC3000
Frankly I don't know any DR tools that could do that, FileVault1 is very rare

_________________
https://www.linkedin.com/in/artemrubtsov/


Top
 Profile  
 
 Post subject: Re: Filevault 1 encrypted user folder decryption on pc3000
PostPosted: February 7th, 2019, 16:05 
Offline

Joined: February 28th, 2011, 21:04
Posts: 187
Location: United Kingdom
Ive mounted drive through pc3k and now accessing it through a VMware hosted Sierra install, but its now saying sparsebundle is corrupt. Nightmare. I only need one file!


Top
 Profile  
 
 Post subject: Re: Filevault 1 encrypted user folder decryption on pc3000
PostPosted: February 7th, 2019, 16:23 
Offline
User avatar

Joined: September 29th, 2005, 12:02
Posts: 3271
Location: Chicago
kpeddie wrote:
Ive mounted drive through pc3k and now accessing it through a VMware hosted Sierra install, but its now saying sparsebundle is corrupt. Nightmare. I only need one file!

You have sparsebundle in addition :)
Fun!

_________________
https://www.linkedin.com/in/artemrubtsov/


Top
 Profile  
 
 Post subject: Re: Filevault 1 encrypted user folder decryption on pc3000
PostPosted: February 7th, 2019, 17:41 
Offline

Joined: December 5th, 2011, 5:38
Posts: 1199
Location: Italy
Read here:
https://forum.hddguru.com/viewtopic.php ... 89#p249089

https://derflounder.wordpress.com/2011/ ... oot-drive/

I've solved this case that my colleague wasn't able to recover in pc3000.
Hope this will work for you too :)


Top
 Profile  
 
 Post subject: Re: Filevault 1 encrypted user folder decryption on pc3000
PostPosted: February 7th, 2019, 18:05 
Offline
User avatar

Joined: September 29th, 2005, 12:02
Posts: 3271
Location: Chicago
I wonder why people keep send links to FileVault2 problems, which is full disk encryption while the topicstarter has FileVault1 problem, which is file-level encryption.

_________________
https://www.linkedin.com/in/artemrubtsov/


Top
 Profile  
 
 Post subject: Re: Filevault 1 encrypted user folder decryption on pc3000
PostPosted: February 7th, 2019, 21:11 
Offline

Joined: December 5th, 2011, 5:38
Posts: 1199
Location: Italy
oops, sorry :lol:
If filesystem is APFS, it may help this?
https://derflounder.wordpress.com/2017/ ... mand-line/
https://derflounder.wordpress.com/2017/ ... s-10-13-2/


Top
 Profile  
 
 Post subject: Re: Filevault 1 encrypted user folder decryption on pc3000
PostPosted: February 7th, 2019, 22:54 
Offline

Joined: February 28th, 2011, 21:04
Posts: 187
Location: United Kingdom
HFS+. Ive managed to image almost all of the sparsebundle but nothing opening it so far and cant repair. Im going to try playing with file permissions tomorrow and match username as well as someone else mentioned that helped them get at data.


Top
 Profile  
 
 Post subject: Re: Filevault 1 encrypted user folder decryption on pc3000
PostPosted: February 8th, 2019, 2:02 
Offline

Joined: November 29th, 2006, 10:08
Posts: 7371
Location: UK
In the past with FV1, if I’ve got a good enough image, I’ve been able to mount the sparsebundle on a Mac. Wasn’t able to mount it any other way if memory serves.

_________________
PC Image Data Recovery
http://www.pcimage.co.uk

New!! HDD-PCB.COM for all your PCB and donor HDD requirements!


Top
 Profile  
 
 Post subject: Re: Filevault 1 encrypted user folder decryption on pc3000
PostPosted: February 8th, 2019, 9:18 
Online
User avatar

Joined: February 9th, 2009, 16:13
Posts: 2166
Location: Ontario, Canada
pcimage wrote:
In the past with FV1, if I’ve got a good enough image, I’ve been able to mount the sparsebundle on a Mac. Wasn’t able to mount it any other way if memory serves.

That is how it has always worked for me.

_________________
Luke
RAID Data Recovery


Top
 Profile  
 
 Post subject: Re: Filevault 1 encrypted user folder decryption on pc3000
PostPosted: February 8th, 2019, 11:00 
Offline

Joined: February 28th, 2011, 21:04
Posts: 187
Location: United Kingdom
Woo. Success. Couldn't get it to open up on OS however managed to mount it using hdiutil attach -noverify -nomount name.sparsebundle and then managed to run diskwarrior on the mounted drive which managed to fix all the errors in it. My time has not been wasted, unlike most of my jobs this week!


Top
 Profile  
 
 Post subject: Re: Filevault 1 encrypted user folder decryption on pc3000
PostPosted: February 8th, 2019, 11:08 
Offline
User avatar

Joined: September 29th, 2005, 12:02
Posts: 3271
Location: Chicago
Good job!

_________________
https://www.linkedin.com/in/artemrubtsov/


Top
 Profile  
 
 Post subject: Re: Filevault 1 encrypted user folder decryption on pc3000
PostPosted: February 8th, 2019, 15:54 
Offline

Joined: December 5th, 2011, 5:38
Posts: 1199
Location: Italy
Yes, DiskWarrior is very good :D


Top
 Profile  
 
 Post subject: Re: Filevault 1 encrypted user folder decryption on pc3000
PostPosted: February 9th, 2019, 6:14 
Offline

Joined: November 29th, 2006, 10:08
Posts: 7371
Location: UK
michael chiklis wrote:
Yes, DiskWarrior is very good :D


Yep, used it yesterday on a failed fusion drive :-)

_________________
PC Image Data Recovery
http://www.pcimage.co.uk

New!! HDD-PCB.COM for all your PCB and donor HDD requirements!


Top
 Profile  
 
 Post subject: Re: Filevault 1 encrypted user folder decryption on pc3000
PostPosted: February 9th, 2019, 17:49 
Online
User avatar

Joined: February 9th, 2009, 16:13
Posts: 2166
Location: Ontario, Canada
To clarify, before someone misinterprets what is being said. DiskWarrior can be helpful when working with the clone, not the patient drive.

_________________
Luke
RAID Data Recovery


Top
 Profile  
 
 Post subject: Re: Filevault 1 encrypted user folder decryption on pc3000
PostPosted: February 9th, 2019, 18:24 
Offline

Joined: November 29th, 2006, 10:08
Posts: 7371
Location: UK
lcoughey wrote:
To clarify, before someone misinterprets what is being said. DiskWarrior can be helpful when working with the clone, not the patient drive.


Yes, this is correct. There is always a reason why it failed in the first place.

9/10 times it’s media issues, so running any “recovery software” on a failing drive will almost certainly end in disaster

_________________
PC Image Data Recovery
http://www.pcimage.co.uk

New!! HDD-PCB.COM for all your PCB and donor HDD requirements!


Top
 Profile  
 
 Post subject: Re: Filevault 1 encrypted user folder decryption on pc3000
PostPosted: February 9th, 2019, 20:23 
Offline

Joined: December 5th, 2011, 5:38
Posts: 1199
Location: Italy
lcoughey wrote:
To clarify, before someone misinterprets what is being said. DiskWarrior can be helpful when working with the clone, not the patient drive.


+1 :wink:


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 20 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: Exabot [Bot], labtech and 33 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group