Tried to install on Mountain Lion about unlock

[HKMacs]

I'd love this to work.

[jridgewell]

I'm seeing a lot of failed downloads, but that's related to your internet connection and not the script.

The larger problem, though, is that you don't have any FireVault 2 encrypted drives (from your diskutil CoreStorage list). You have to encrypt your drives beforehand. All this program does is unlock them during startup.

[HKMacs]

Hi John,

I don't know whether you missed this but:

Vinces-MacBook-Pro:vince vince$ diskutil CoreStorage list
CoreStorage logical volume groups (1 found)
|
+-- Logical Volume Group 35B00C2F-C182-42A7-8A59-E559A9260F28
=========================================================
Name: Data HD
Size: 499113885696 B (499.1 GB)
Free Space: -none-
|
+-< Physical Volume 16D4C683-4A13-4747-B8A0-AB4E3F85BF90
----------------------------------------------------
Index: 0
Disk: disk0s2
Status: Checking
Size: 499113885696 B (499.1 GB)

Which surely indicates that Data HD was encrypted??

Your script did install at /Library/LaunchDaemons as well because I checked - it was there.

But it didn't work the second time I rebooted.

Slightly unfair to close this issue before we've resolved it, don't you think?

Please can you help. I had to reformat the drive and clone back my Users folder and everything is fine except my Data HD is not encrypted this time round.

Do you suggest I try again or what?

Best regards,

Vince
––––––––––––––––––––––
Vince Loden
HKMacs

(852) 29824274
(852) 93486884
E-mail: [email protected]
[email protected]
Website
Blog

On 5 Oct, 2012, at 4:06 AM, Justin Ridgewell wrote:

I'm seeing a lot of failed downloads, but that's related to your internet connection and not the script.

The larger problem, though, is that you don't have any FireVault 2 encrypted drives (from your diskutil CoreStorage list). You have to encrypt your drives beforehand. All this program does is unlock them during startup.

—
Reply to this email directly or view it on GitHub.

[jridgewell]

Is the Data HD drive encrypted now (encrypted, not unlocked).

A few things for you to check:

• In Keychain Access, in the System keychain, is there a key for Unlock: Data HD?
• Is the stored passphrase for that key the passphrase for the drive?

Create a new User Profile, and turn off the computer and log into the new user. What is the output of sudo /Library/LaunchDaemons/name.ridgewell.unlock?

[HKMacs]

Hi John,

Thanks for your speedy response. The Data drive had to be reformatted and the Users put back from a CCC backup. So there is no entry in the Keychain that was restored. I would need to re-install your script and I haven't yet encrypted the new Data HD pending your instructions.

Last login: Fri Oct 5 11:06:20 on console
Vinces-MacBook-Pro:~ test$ sudo /Library/LaunchDaemons/name.ridgewell.unlock

WARNING: Improper use of the sudo command could lead to data loss
or the deletion of important system files. Please double-check your
typing when using sudo. Type "man sudo" for more information.

To proceed, enter your password, or type Ctrl-C to abort.

Password:
2012-10-05 11:08:02.086 name.ridgewell.unlock[325:707] Error: SecItemCopyMatching returned -25300!
Vinces-MacBook-Pro:~ test$

Hope this helps.
Best regards,

Vince
––––––––––––––––––––––
Vince Loden
HKMacs

(852) 29824274
(852) 93486884
E-mail: [email protected]
[email protected]
Website
Blog

On 5 Oct, 2012, at 10:45 AM, Justin Ridgewell wrote:

Is the Data HD drive encrypted now (encrypted, not unlocked).

A few things for you to check:

In Keychain Access, in the System keychain, is there a key for Unlock: Data HD?
Is the stored passphrase for that key the passphrase for the drive?
Create a new User Profile, and turn off the computer and log into the new user. What is the output of sudo /Library/LaunchDaemons/name.ridgewell.unlock?

—
Reply to this email directly or view it on GitHub.

[jridgewell]

The error code is expected since there is no key in the keychain.

I'm sorry that you've had to reformat you're drive, but I won't be able to diagnose the problem until you've re-encrypted and re-installed Unlock.

I'd recommend you run the uninstall script (curl https://raw.github.com/jridgewell/Unlock/master/uninstall.sh | bash), and keep a secondary account that can unlock the drive on the machine until we can figure it out.

[HKMacs]

OK. So the new User Profile must be on the Boot SSD I presume.

I've been using Encrypt by right-clicking on the drive, but when it was encrypted the first time I didn't see a Decrypt in the menu. Should all this be done in Terminal?

I don't really want to go ahead until you please could give me clear instructions.

Best regards,

Vince
––––––––––––––––––––––
Vince Loden
HKMacs

(852) 29824274
(852) 93486884
E-mail: [email protected]
[email protected]
Website
Blog

On 5 Oct, 2012, at 10:45 AM, Justin Ridgewell wrote:

Is the Data HD drive encrypted now (encrypted, not unlocked).

A few things for you to check:

In Keychain Access, in the System keychain, is there a key for Unlock: Data HD?
Is the stored passphrase for that key the passphrase for the drive?
Create a new User Profile, and turn off the computer and log into the new user. What is the output of sudo /Library/LaunchDaemons/name.ridgewell.unlock?

—
Reply to this email directly or view it on GitHub.

[HKMacs]

Dear Justin,

I think I finally got it to work.

I followed instructions here http://www.macworld.com/article/1168077/encrypt_any_disk_in_mountain_lion.html
in order to do it all in Terminal. Then I installed your script and checked in Keychain System before rebooting.

I am puzzled that encryption in Terminal is so much faster than using the alternate menu in Finder but it appears the disk is indeed encrypted as I also tried to boot from an external USB system disk and was asked for the unlock code for the Data HD so I'm presuming all is OK.

Thank you very much for your incredibly useful program and I shall certainly blog about it.

Best regards,

Vince
––––––––––––––––––––––
Vince Loden
HKMacs

(852) 29824274
(852) 93486884
E-mail: [email protected]
[email protected]
Website
Blog

On 5 Oct, 2012, at 11:19 AM, Justin Ridgewell [email protected] wrote:

The error code is expected since there is no key in the keychain.

I'm sorry that you've had to reformat you're drive, but I won't be able to diagnose the problem until you've re-encrypted and re-installed Unlock.

I'd recommend you run the uninstall script (curl https://raw.github.com/jridgewell/Unlock/master/uninstall.sh | bash), and keep a secondary account that can unlock the drive on the machine until we can figure it out.

—
Reply to this email directly or view it on GitHub.

[jridgewell]

Glad to hear it!

[HKMacs]

Hi Justin,

I've actually blogged the whole procedure at http://hkmacs.com/Blog/?p=515 as I reckon some people might find it handy and submitted it to Mac OS X Hints and MacSurfer.

Please let me know if I've made any errors - of course without your script it wouldn't be possible. Why the heck haven't Apple rectified this?

Best regards,

Vince
––––––––––––––––––––––
Vince Loden
HKMacs

(852) 29824274
(852) 93486884
E-mail: [email protected]
[email protected]
Website
Blog

On 8 Oct, 2012, at 11:06 AM, Justin Ridgewell wrote:

Glad to hear it!

—
Reply to this email directly or view it on GitHub.