17 C
New York
Monday, June 2, 2025

Manually Decrypt Partially Cloned APFS Quantity


I lately tried to clone a failing exterior drive to a brand new exterior drive. The clone failed part-way into the method. The unique drive {hardware} has now absolutely failed, so I am attempting to recuperate as a lot as I can from the clone.

After I plug within the clone, macOS provides me an error studying "The disk ‘Volume_Name’ cannot be unlocked. An issue was detected with the disk that forestalls it from being unlocked." Disk Utility exhibits 1.6 TB used. I attempted unlocking it from the command line and the Terminal output was Passphrase incorrect or person doesn't exist. I’m sure I am getting into the passphrase appropriately.

A scan in Information Rescue exhibits a recognizable checklist of recordsdata and folders. I can copy a file from the clone, however I am unable to open it. I’m guessing that the recordsdata are encrypted individually whereas the folder construction just isn’t.

From my analysis, macOS creates a separate cryptouser on an encrypted disk (separate from a Mac account/person) in order that one password can open the disk on any Mac. After I used diskutil apfs listcryptousers /dev/Volume_Name in Terminal, the output is No cryptographic customers for Volume_Name when it ought to output one thing like this:

I imagine I’ve recovered the clone quantity’s cryptouser string from Keychain Entry on two separate Macs (they match), so I’ve each the person and the passphrase. Is there a method to enter these manually and decrypt the drive? Both by way of the Terminal or a third-party piece of software program?

For reference, I obtained a variety of data from this web page regardless that it outlines boot drives as an alternative of exterior ones.

Thanks upfront!

Related Articles

LEAVE A REPLY

Please enter your comment!
Please enter your name here

Latest Articles