Jump to content

FileVault 2

FileVault FileVault 2

  • Please log in to reply
258 replies to this topic

#41
jqqqqq

jqqqqq

    InsanelyMac Protégé

  • Members
  • Pip
  • 5 posts

I'm using UsbKbDxe from Clover 3882 package. The same clover 3882 legacy is installed on my hackintosh PC and it works fine - I unlock FV2 w/o any problems.

P.S. Additionally Ctrl-Alt-Del works - it reboots my laptop :)

I tried all of these efis above, and UsbKbDxe found in clover work for my external keyboard, you have to unplug and plug in again to make it work

still waiting for internal ps2 keyboard working



#42
oSxFr33k

oSxFr33k

    InsanelyMac Legend

  • Members
  • PipPipPipPipPipPipPipPip
  • 1,115 posts
  • Gender:Male
  • Interests:Sound and Graphic Design. Electronics in general.

With AptioInputFix do I just need to remove UsbKbDxe-64.efi or I can have both in drivers64UEFI?  If I need to remove it are there any others to remove that the newer versions of clover installs.  Not using FV

 

Thanks



#43
savvamitrofanov

savvamitrofanov

    InsanelyMac Protégé

  • Coders
  • 77 posts
  • Gender:Male

With new version of AmiShim, I got to work all hotkeys (cmd+s/cmd+r/cmd+v/shift)



#44
vit9696

vit9696

    InsanelyMac Geek

  • Developers
  • 249 posts
  • Gender:Male

With AptioInputFix do I just need to remove UsbKbDxe-64.efi or I can have both in drivers64UEFI?  If I need to remove it are there any others to remove that the newer versions of clover installs.  Not using FV
 
Thanks

You should remove UsbKbDxe and only that.

With new version of AmiShim, I got to work all hotkeys (cmd+s/cmd+r/cmd+v/shift)

Nice, looks like it was accidentally broken in the previous one.

#45
mrmacdi2

mrmacdi2

    InsanelyMac Protégé

  • Members
  • Pip
  • 16 posts

I tried all of these efis about, and UsbKbDxe found in clover work for my external keyboard, you have to unplug and plug in again to make it work
still waiting for internal ps2 keyboard working

I've unplugged and plugged it many times: tried different usb ports, even via usb hub :) Caps lock, num lock, Ctrl alt del work thats it.
Can it happen because my laptop has Phoenix TrustCore bios?
In Clover GUI this usb kb works fine.

#46
jqqqqq

jqqqqq

    InsanelyMac Protégé

  • Members
  • Pip
  • 5 posts

I've unplugged and plugged it many times: tried different usb ports, even via usb hub :) Caps lock, num lock, Ctrl alt del work thats it.
Can it happen because my laptop has Phoenix TrustCore bios?
In Clover GUI this usb kb works fine.

AppleImageCodec-64.efi     

HashServiceFix-64.efi

NTFS.efi

AppleKeyMapAggregator.efi 

OsxAptioFix2Drv.efi

AppleUITheme-64.efi        

OsxFatBinaryDrv-64.efi

AptioInputFixB2.efi        

PartitionDxe-64.efi

DataHubDxe-64.efi         

SMCHelper-64.efi

UsbKbDxe-64.efi

FSInject-64.efi            

FirmwareVolume-64.efi      

HFSPlus.efi

i put all of these efis into clover, and it works.....

it won't work without usbkbdxe though

i don't know if there're conflicts, but my internal keyboard cannot work properly

BTW, my laptop is Phoenix BIOS too



#47
Slice

Slice

    InsanelyMac V.I.P.

  • Local Moderators
  • 6,487 posts
  • Gender:Male
  • Location:Moscow

I think AptioInputFix will not be even started on  Phoenix BIOS.



#48
mrmacdi2

mrmacdi2

    InsanelyMac Protégé

  • Members
  • Pip
  • 16 posts

AppleImageCodec-64.efi
HashServiceFix-64.efi
NTFS.efi
AppleKeyMapAggregator.efi
OsxAptioFix2Drv.efi
AppleUITheme-64.efi
OsxFatBinaryDrv-64.efi
AptioInputFixB2.efi
PartitionDxe-64.efi
DataHubDxe-64.efi
SMCHelper-64.efi
UsbKbDxe-64.efi
FSInject-64.efi
FirmwareVolume-64.efi
HFSPlus.efi
i put all of these efis into clover, and it works.....
it won't work without usbkbdxe though
i don't know if there're conflicts, but my internal keyboard cannot work properly
BTW, my laptop is Phoenix BIOS too

I have the same except for NTFS.efi.
BTW on my PC the same config with the same USB kb works fine with FV2.
Looks like Phoenix and Phoenix TrustedCore are really different things.

#49
mrmacdi2

mrmacdi2

    InsanelyMac Protégé

  • Members
  • Pip
  • 16 posts

[GUIDE] How to revert FileVault 2 if you are not able to enter your password: for example, USB keyboard is not working.

 

1. Boot into Recovery HD (where you can restore macOS, have Disk Utility)

2. Select Terminal (top menu)

3. diskutil corestorage list

4. Look for Logical Volume XXXXXXXX-XXXX-XXXX-XXXXXXXXXXXXXXXX and copy XXX...XXXX (NOT from Logical Volume Family!)

5. diskutil corestorage unlockVolume UUID (paste copied UUID from step 4)

6. diskutil corestorage revert UUID (paste copied UUID from step 4)

7.

7.1) If it's your first boot after you've enabled FileVault 2, then type reboot in Terminal and boot macOS as usual.

7.2) If it's NOT the first boot after you've enabled FileVault 2, then diskutil corestorage list and check conversion status, type reboot ONLY when diskutil corestorage list shows you NO encrypted volumes!

 

Done



#50
Slice

Slice

    InsanelyMac V.I.P.

  • Local Moderators
  • 6,487 posts
  • Gender:Male
  • Location:Moscow

Since rev 3905 hibernation works on FileVault2 volume. In this case password is not asked.

Explanations followed.



#51
smolderas

smolderas

    InsanelyMac Sage

  • Members
  • PipPipPipPipPip
  • 359 posts
  • Gender:Male

Since rev 3905 hibernation works on FileVault2 volume. In this case password is not asked.

Explanations followed.

Wow. So you implemented authenticated restart option for filevault, hence it is not supported by all real macs. Nice work.



#52
Slice

Slice

    InsanelyMac V.I.P.

  • Local Moderators
  • 6,487 posts
  • Gender:Male
  • Location:Moscow

Wow. So you implemented authenticated restart option for filevault, hence it is not supported by all real macs. Nice work.

Because I never hear it is not working on real Mac.

Some tests and dumps show me the way.

What is "authenticated restart option"?



#53
modbin

modbin

    InsanelyMac Geek

  • Developers
  • 168 posts
  • Gender:Male

'fdesetup authrestart' stores the FV2 unlock key in mem and on supported machines in the SMC. That happens if u upgrade OS X on a FV2 Volume on reboot. No need to enter the passwd on the FV2 uefi unlock screen.



#54
smolderas

smolderas

    InsanelyMac Sage

  • Members
  • PipPipPipPipPip
  • 359 posts
  • Gender:Male

'fdesetup authrestart' stores the FV2 unlock key in mem and on supported machines in the SMC. That happens if u upgrade OS X on a FV2 Volume on reboot. No need to enter the passwd on the FV2 uefi unlock screen.

This...



#55
droples

droples

    InsanelyMac Sage

  • Members
  • PipPipPipPipPip
  • 250 posts
  • Gender:Male

Clover3905 ,OS X_10.11.6  - hibernation works on FV2 volume.

Hibernatemode  25.

0:100  0:000  Now is 5.11.2016,  3:49:0 (GMT)
0:100  0:000  Starting Clover revision: 3905 on American Megatrends EFI
0:100  0:000  Build with: [Args: -mc --no-lto -D NO_GRUB_DRIVERS_EMBEDDED -D ENABLE_VBIOS_PATCH_CLOVEREFI -D CHECK_FLAGS -D EXIT_USBKB=1 | -D DISABLE_LTO -D NO_GRUB_DRIVERS_EMBEDDED -D ENABLE_VBIOS_PATCH_CLOVEREFI -D CHECK_FLAGS -D EXIT_USBKB=1 -D USE_BIOS_BLOCKIO -D USE_LOW_EBDA -a X64 -b RELEASE -t XCODE5 -n 9 | OS: 10.11.6 | XCODE: 7.3.1]
0:100  0:000  SelfDevicePath=PciRoot(0x0)\Pci(0x1F,0x2)\Sata(0x4,0xFFFF,0x0)\HD(1,GPT,034095C8-5F4A-4281-85FC-A7A50EF5597F,0x28,0x64000) @DB849C98
........
.......

1:011  0:003  === [ ScanLoader ] ========================================
1:011  0:000  - [02]: 'EFI'
1:011  0:000  - [04]: 'Recovery HD'
1:049  0:038          AddLoaderEntry for Volume Name=Recovery HD
1:059  0:010      Check if volume Is Hibernated:
1:059  0:000      UEFI with NVRAM: yes
1:059  0:000      Boot0082 points to Volume with UUID:508FC8D5-01AB-48BF-9DDD-7123973B92D9
1:059  0:000      boot-image before: PciRoot(0x0)\Pci(0x1F,0x2)\Sata(0x4,0x0,0x0)\5f5ed3000:FACFF350-751C-46A2-86A6-543391FAFD26
1:059  0:000  02 01 0C 00 D0 41 03 0A 00 00 00 00 01 01 06 00 | .....A..........
1:059  0:000  02 1F 03 12 0A 00 04 00 FF FF 00 00 04 04 62 00 | ..............b.
1:059  0:000  35 00 66 00 35 00 65 00 64 00 33 00 30 00 30 00 | 5.f.5.e.d.3.0.0.
1:059  0:000  30 00 3A 00 35 00 30 00 46 00 33 00 43 00 46 00 | 0.:.5.0.F.3.C.F.
1:059  0:000  46 00 41 00 2D 00 31 00 43 00 37 00 35 00 2D 00 | F.A.-.1.C.7.5.-.
1:059  0:000  41 00 32 00 34 00 36 00 2D 00 38 00 36 00 41 00 | A.2.4.6.-.8.6.A.
1:059  0:000  36 00 2D 00 35 00 34 00 33 00 33 00 39 00 31 00 | 6.-.5.4.3.3.9.1.
1:059  0:000  46 00 41 00 46 00 44 00 32 00 36 00 00 00 7F FF | F.A.F.D.2.6.....
1:059  0:000  04 00                                           | ..
1:059  0:000      boot-image after: PciRoot(0x0)\Pci(0x1F,0x2)\Sata(0x4,0xFFFF,0x0)\5f5ed3000:50F3CFFA-1C75-A246-86A6-543391FAFD26
1:062  0:002    =>set entry as hibernated
1:109  0:047          [!] Icon 17 (icons\vol_internal_hfs.icns) not found (path: EFI\CLOVER\themes\BGM)
1:111  0:002          AddLoaderEntry for Volume Name=Recovery HD
Spoiler


#56
barijaona

barijaona

    InsanelyMac Protégé

  • Members
  • PipPip
  • 51 posts

 

  • Troubleshooting:
    • Hibernation is a no go for those having no hardware nvram and no StrictHibernate in clover config
      No solutions for the time being and no solutions planned

I need some clarification here. As hardware NVRAM is broken in Skylake machines, does that mean that hibernation will be impossible with a Skylake configuration, even if one does not use FileVault ?



#57
Slice

Slice

    InsanelyMac V.I.P.

  • Local Moderators
  • 6,487 posts
  • Gender:Male
  • Location:Moscow

You may not use StrictHibernate that requires hardware nvram. In this case it will be old legacy way to hibernate and it was working in mode 29 previously. Not sure if it is still possible in Sierra.

What to do? Be developer and invent your way.

As well someone should make hardware nvram working on a Skylake system.



#58
Download-Fritz

Download-Fritz

    ygolohcysp desreveR

  • Developers
  • 778 posts
  • Gender:Not Telling

Variable Store ("NVRAM") discussion was moved here:

http://www.insanelym...swell-e-and-up/



#59
smolderas

smolderas

    InsanelyMac Sage

  • Members
  • PipPipPipPipPip
  • 359 posts
  • Gender:Male

With the latest commits I can type directly my password without replugging my keyboard (booting with clover legacy).



#60
xver

xver

    InsanelyMac Protégé

  • Members
  • Pip
  • 4 posts

Using an ASUS Maximus Impact VII (AMI UEFI BIOS) here, firmware revision 3003. I've got one Apple USB keyboard connected to a DELL screen which acts as USB 3.0 hub. The system is set to boot using native UEFI with Clover 3922. macOS 10.12.1.

 

FileVault 2 itself is working flawlessly, but the login screen has issues.

 

With UsbKbDxe, login is possible with a password with mixed upper- and lower-case characters and special characters (German/QWERTZ keymap). Issues are that 1) the keyboard must be plugged in during login and 2) the system freezes during startup very often (like described by vit9696 in first post).

 

With vit9696's AptioInputFix driver, the keyboard kind of works (repeated keys are lost, cmd+a etc don't work), but every password I enter is considered to be incorrect. I've tried changing the password to an all lower-case one without potentially remapped characters (such as z and y). No luck with the simple password. Logging in using the recovery key works with AptioInputFix - odd!

 

@vit9696, would you consider publishing your driver's source code (on GitHub, for proper attribution), or do you at least have a hint on why no password is accepted? I would like to investigate the issue further.

 







Also tagged with one or more of these keywords: FileVault, FileVault 2

  Topic Stats Last Post Info

1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users

© 2017 InsanelyMac  |   News  |   Forum  |   Downloads  |   OSx86 Wiki  |   Designed by Ed Gain  |   Logo by irfan  |   Privacy Policy