Hi 2gether
I got a serious problem: After an upgrade vom 9.2.1.8 to 9.3 I can't decrypt my mirrored disks / my volume anymore.
I got the geli masterkeys from the two disks (ada0p2 and ada1p2) and a user-key (geli.key) with passphrase and the recovery-key (geli_recovery.key). I also got the config.db from my 9.2.1.8 installation. I can also dump the geli metadata (masterkey?) with the command "geli dump".
But I can't unlock my volume on the 9.3 webinterface, nomatter if I try with the geli.key & passphrase or the recovery.key.
I tried on the CLI with the geli-command. I got follwing error:
Same on ada0p2. But the key is not wrong.
What do I wrong? Do I need to import the zpool first? Or is it a problem because of the mirror? Do I need to mount the encrypted mirror pior to try to attach the volume?
Is there a possiblity to recreate a new userkey & passphrase just with the geli metadata (masterkeys?) from the mirrored drives and for example a former userkey&passphrase or recovery key?
Thanks so much!
P@sco
I got a serious problem: After an upgrade vom 9.2.1.8 to 9.3 I can't decrypt my mirrored disks / my volume anymore.
I got the geli masterkeys from the two disks (ada0p2 and ada1p2) and a user-key (geli.key) with passphrase and the recovery-key (geli_recovery.key). I also got the config.db from my 9.2.1.8 installation. I can also dump the geli metadata (masterkey?) with the command "geli dump".
But I can't unlock my volume on the 9.3 webinterface, nomatter if I try with the geli.key & passphrase or the recovery.key.
I tried on the CLI with the geli-command. I got follwing error:
Code:
~# geli attach -k geli_recovery.key /dev/ada1p2 Enter passphrase: geli: Wrong key for ada1p2.
Same on ada0p2. But the key is not wrong.
What do I wrong? Do I need to import the zpool first? Or is it a problem because of the mirror? Do I need to mount the encrypted mirror pior to try to attach the volume?
Is there a possiblity to recreate a new userkey & passphrase just with the geli metadata (masterkeys?) from the mirrored drives and for example a former userkey&passphrase or recovery key?
Thanks so much!
P@sco
Last edited: