Unable to decrypt disk after version change

[thomaspeel]

Hello everyone,

First things first, a few words about my configuration :
- HP Proliant Microserver Gen8, Xeon 2.2GHz and 12Gb of RAM.
- 2x 4TB HDDs in ZFS mirror hosting 1 encrypted pool named, well, "pool".
This machine has been working neatly for 2 years now.

Yesterday I upgraded from 9.10.2-U3 to 11.2-BETA2.
Storage wise everything was working fine until I decide to roll back to a 9.10.2-U6 boot environment I had on the stick, from an older GUI upgrade attempt. Unfortunately, this environment was somehow corrupted and the system ended up in panic.

I made a fresh install of 11.2-BETA2 on a brand new stick, got the database back, and booted up confident in getting my pool back. That is of course, when it started to get scary :

- when trying to unlock my pool, I got an error "MiddlewareError: Volume could not be imported: 2 devices failed to decrypt".
- no ZFS pool was detected by the GUI or the CLI using zpool import
- in the GUI, I tried to detach the volume and reimport one of the mirrored HDD using the precious recovery key and passphrase, I got the same error on both of them : "The following disks failed to attach: gptid/f3bb4086-a203-11e6-9656-1c98ec0f5528"

That is the point where my skills end... I have only one question, but it will keep me under pressure for real : are there any things to try to get my data back?

Many thanks for having read!

Thomas

Code:

root@Nestor:~ # gpart show

=>	  40  61341616  da0  GPT  (29G)
		40	  1024	1  freebsd-boot  (512K)
	  1064  61340584	2  freebsd-zfs  (29G)
  61341648		 8	   - free -  (4.0K)

=>		34  7814037101  ada0  GPT  (3.6T)
		  34		  94		- free -  (47K)
		128	 4194304	 1  freebsd-swap  (2.0G)
	4194432  7809842696	 2  freebsd-zfs  (3.6T)
  7814037128		   7		- free -  (3.5K)

=>		34  7814037101  ada1  GPT  (3.6T)
		  34		  94		- free -  (47K)
		128	 4194304	 1  freebsd-swap  (2.0G)
	4194432  7809842696	 2  freebsd-zfs  (3.6T)
  7814037128		   7		- free -  (3.5K)

 

[Ericloewe]

If you're providing the recovery key do not enter a password. If you're providing the regular key, do provide the password.

 

[thomaspeel]

Thank you for your answer. I did not have the chance to try that since I found this post which solved my problem : I copied the key from the /data/geli folder on the old USB stick to the new, and was able to decrypt the pool as I always did from the GUI with recovery key and passphrase.

Anyway thanks again for your support! More than glad to find help on this nice forum :)

 

[Ericloewe]

If you entered a password, it is not the recovery key. GELI has two key slots, FreeNAS uses the first one as key + password and the second one as just a key.

 

[thomaspeel]

Right, I find I have standard and recovery keys mistaken. That's weird since I just saved them with the generic name back at the time... :-/ Anyway, got it all right now, thanks Eric.