Filevault 1 encrypted user folder decryption on pc3000

[kpeddie]

Anyway to decrypt a filevault 1 encrypted folder through pc3k? Dying media that probably wont make it through a clone.

[data-medics]

Google is your friend:

https://blog.acelaboratory.com/pc-3000- ... crypt.html

[kpeddie]

It is indeed, and I have used that method to decrypt quite a few Filevault 2 partitions, unfortunately this is a Filevault 1 encrypted folder and that doesn't work as far as I can tell.

[Iurii]

Did you try to use UFS Explorer/Recovery Explorer with steps like that https://youtu.be/tYbTtHuINzI ?

[Doomer]

Anyway to decrypt a filevault 1 encrypted folder through pc3k? Dying media that probably wont make it through a clone.

No, there is no way to decrypt FileVault1 through PC3000
Frankly I don't know any DR tools that could do that, FileVault1 is very rare

[kpeddie]

Ive mounted drive through pc3k and now accessing it through a VMware hosted Sierra install, but its now saying sparsebundle is corrupt. Nightmare. I only need one file!

[Doomer]

Ive mounted drive through pc3k and now accessing it through a VMware hosted Sierra install, but its now saying sparsebundle is corrupt. Nightmare. I only need one file!

You have sparsebundle in addition
Fun!

[michael chiklis]

Read here:
https://forum.hddguru.com/viewtopic.php ... 89#p249089

https://derflounder.wordpress.com/2011/ ... oot-drive/

I've solved this case that my colleague wasn't able to recover in pc3000.
Hope this will work for you too

[Doomer]

I wonder why people keep send links to FileVault2 problems, which is full disk encryption while the topicstarter has FileVault1 problem, which is file-level encryption.

[michael chiklis]

oops, sorry
If filesystem is APFS, it may help this?
https://derflounder.wordpress.com/2017/ ... mand-line/
https://derflounder.wordpress.com/2017/ ... s-10-13-2/

[kpeddie]

HFS+. Ive managed to image almost all of the sparsebundle but nothing opening it so far and cant repair. Im going to try playing with file permissions tomorrow and match username as well as someone else mentioned that helped them get at data.

[pcimage]

In the past with FV1, if I’ve got a good enough image, I’ve been able to mount the sparsebundle on a Mac. Wasn’t able to mount it any other way if memory serves.

[lcoughey]

In the past with FV1, if I’ve got a good enough image, I’ve been able to mount the sparsebundle on a Mac. Wasn’t able to mount it any other way if memory serves.

That is how it has always worked for me.

[kpeddie]

Woo. Success. Couldn't get it to open up on OS however managed to mount it using hdiutil attach -noverify -nomount name.sparsebundle and then managed to run diskwarrior on the mounted drive which managed to fix all the errors in it. My time has not been wasted, unlike most of my jobs this week!

[Doomer]

Good job!

[michael chiklis]

Yes, DiskWarrior is very good

[pcimage]

Yes, DiskWarrior is very good

Yep, used it yesterday on a failed fusion drive

[lcoughey]

To clarify, before someone misinterprets what is being said. DiskWarrior can be helpful when working with the clone, not the patient drive.

[pcimage]

To clarify, before someone misinterprets what is being said. DiskWarrior can be helpful when working with the clone, not the patient drive.

Yes, this is correct. There is always a reason why it failed in the first place.

9/10 times it’s media issues, so running any “recovery software” on a failing drive will almost certainly end in disaster

[michael chiklis]

To clarify, before someone misinterprets what is being said. DiskWarrior can be helpful when working with the clone, not the patient drive.

+1