Popular Post vit9696 Posted October 28, 2016 Popular Post Share Posted October 28, 2016 (edited) Alright, after a couple of weeks of hard work performed by: ath, Download-Fritz, slice, savvas, and myself FileVault 2 should work everywhere now. Additionally thanks to iNDi for help and initial discovery of certain FV aspects. This means that everybody gets some pros for this but mainly Clover. Everything works in test mode for the time being, so you better wreck your disk drives and tell us how much fun it was Clover: In brief you are required to install a set of drivers present at least in r3876. There are two driver categories, and each one will be addressed separately. UI drawing. Make sure that you remove all the legacy drivers implemented in the past. The list includes: AppleImageCodec-64.efi, AppleKeyAggregator-64.efi, AppleKeyMapAggregator.efi, AppleEvent.efi, AppleUITheme-64.efi, EnglishDxe-64.efi, FirmwareVolume-64.efi, HashServiceFix-64.efi Avoid OsxAptioFix1/2/3, because they may cause boot hang during recovery entrance. Use AptioMemoryFix. The following is mandatory: AppleUiSupport.efi — or you will get cursor error; VirtualSmc.efi (for VirtualSMC) or SMCHelper.efi (for FakeSMC). Password input. To do that you need a keyboard driver, which knows about Apple key aggregation protocol. There are two input drivers for the time being: AptioInputFix — my driver specific to AMI APTIO IV UEFI BIOS. Still in process of a rewrite and release.Pros: — works without keyboard reconnect or driver flash with USB and PS/2 keyboards in AMI UEFI BIOS; — fixes not working mouse input on Z87 and possibly newer;Cons: — some multisymbol hotkeys will not work (e.g. 3+2, 6+4); — key autorepeat might cause issues on some systems; — mouse might work a bit slowly on some systems (better than nothing).Recommendations: A lightweight solution that will mostly work well for some people. If it works for you and you have no desire to flash your BIOS, perhaps it is a good idea. Modified UsbKbDxe, a slightly altered version is present in Clover.Pros: — works with any USB keyboard in any BIOS; — offers completely functional Apple boot keys (CMD+V, 3+2, CMD+R, etc.);Cons: — might require a physical keyboard reconnect after driver load with AMI UEFI BIOS; — might lead to a complete freeze of the system with AMI UEFI BIOS.Recommendations: It is recommended to use this driver from BIOS or via legacy clover boot. In this case you will have no issues with keyboard connection. To solve freezing issues you will need to rebuild UsbKbDxe with a forced controller disconnect at EXIT BS. In case of Clover use: ./ebuild.sh -D EXIT_USBKB=1 In case of the original driver see these PCDs. Both should be set to TRUE. In case of Clover FixOwnership might help you, but I would not recommend this. AppleKeyFeeder — a solution by Jief_Machak for very very broken systems, for e.g. PS/2 keyboards on laptops. It does not emulate all the keys and does not support key combination, but is definitely better than nothing.Link to a binary. Hibernation is a no go for those having no hardware nvram and no StrictHibernate in clover config No solutions for the time being and no solutions planned. Shutdown button on login screen may cause a restart No solutions for the time being. Password change/reset during the volume encryption might cause issues when logging in Apple issue. Please refrain from changing or resetting the password before the encryption completes. In cases this is required use your generated recovery key to login into the system. Edited September 2, 2018 by vit9696 21 Link to comment https://www.insanelymac.com/forum/topic/317290-filevault-2/ Share on other sites More sharing options...
D-an-W Posted October 28, 2016 Share Posted October 28, 2016 Great work everyone, many thanks I am excited to try it Can I please ask at what point of reboot is the password requested as I generally skip the Clover GUI (Login = 0 in Config.plist), would this be a problem? I also use the Apple bluetooth Keyboard, Mouse and Trackpad which work fine both in the BIOS and Clover GUI as they connect with the Apple Broadcom Bluetooth would they be compatible? Link to comment https://www.insanelymac.com/forum/topic/317290-filevault-2/#findComment-2307835 Share on other sites More sharing options...
vit9696 Posted October 28, 2016 Author Share Posted October 28, 2016 The pw is requested by boot.efi, clover ui has nothing to do with it. You should choose the right boot entry at least once though. (Boot macOS from Recovery HD) As for your input devices that needs testing. I would say that they should work almost certainly though. 1 Link to comment https://www.insanelymac.com/forum/topic/317290-filevault-2/#findComment-2307853 Share on other sites More sharing options...
D-an-W Posted October 28, 2016 Share Posted October 28, 2016 Thanks vit9696, it has been a while since FileVault was first tested with Clover (Back on ProjectOSX and it didn't work) so I will have to familiarise myself with the process again at the weekend when I get home. Link to comment https://www.insanelymac.com/forum/topic/317290-filevault-2/#findComment-2307856 Share on other sites More sharing options...
Slice Posted October 28, 2016 Share Posted October 28, 2016 Thanks vit9696, it has been a while since FileVault was first tested with Clover (Back on ProjectOSX and it didn't work) so I will have to familiarise myself with the process again at the weekend when I get home. Yes, it never worked before. Link to comment https://www.insanelymac.com/forum/topic/317290-filevault-2/#findComment-2307871 Share on other sites More sharing options...
smolderas Posted October 28, 2016 Share Posted October 28, 2016 Great work, will be testing after backing things up... Link to comment https://www.insanelymac.com/forum/topic/317290-filevault-2/#findComment-2307955 Share on other sites More sharing options...
dgsga Posted October 28, 2016 Share Posted October 28, 2016 Just wanted to say thanks to everyone involved here for reaching this milestone. Fantastic work! FV2 up and running here Cheers! 2 Link to comment https://www.insanelymac.com/forum/topic/317290-filevault-2/#findComment-2308477 Share on other sites More sharing options...
D-an-W Posted October 28, 2016 Share Posted October 28, 2016 If anyone can spare the time would you be able to document the process of enabling it please (Nothing too fancy obviously) for example which of the options did you choose etc? Link to comment https://www.insanelymac.com/forum/topic/317290-filevault-2/#findComment-2308498 Share on other sites More sharing options...
smolderas Posted October 28, 2016 Share Posted October 28, 2016 I just tested it. It works as described. You should choose recovery HD on that drive to be able to boot, which make sense if you think how file vault works. One minor issue is, I had to replug my usb keyboard to be able to type my password, even though I've booted via legacy clover, as described in recommendation. I'll try the AppleKeyAggregator from Apple Firmware, just for test (I mean who would use closed source programs and want to encrypt the drive with it or better decrypt with that?!). Everything else is perfect. Thanks again to all who contributed... Edit: I've tried the original AppleKeyMapAggregator from Apple firmware, even the AptioInputFix. Nothing changed though, I still have to replug my keyboard Edit2: Just had the idea, locking from find my mac should theoretically work, right? Link to comment https://www.insanelymac.com/forum/topic/317290-filevault-2/#findComment-2308680 Share on other sites More sharing options...
mhaeuser Posted October 29, 2016 Share Posted October 29, 2016 with legacy Clover, remove the EDK2 UsbKbDxe driver and use mine... also best to use Apple's AppleKeyMapAggregator. Do not use AmiShim. 1 Link to comment https://www.insanelymac.com/forum/topic/317290-filevault-2/#findComment-2309014 Share on other sites More sharing options...
smolderas Posted October 29, 2016 Share Posted October 29, 2016 with legacy Clover, remove the EDK2 UsbKbDxe driver and use mine... also best to use Apple's AppleKeyMapAggregator. Do not use AmiShim. Is there a guide to build your UsbKbDxe? Link to comment https://www.insanelymac.com/forum/topic/317290-filevault-2/#findComment-2309029 Share on other sites More sharing options...
reyder Posted October 29, 2016 Share Posted October 29, 2016 I'm using Intel+AMD (black screen during boot) solution for a working sleep. When I enable FV2 Will I have black screen while typing password ? Link to comment https://www.insanelymac.com/forum/topic/317290-filevault-2/#findComment-2309037 Share on other sites More sharing options...
oswaldini Posted October 29, 2016 Share Posted October 29, 2016 AptioInputFix work for me. Is there any AptioInputFix without debug mode before Clover menu ? Link to comment https://www.insanelymac.com/forum/topic/317290-filevault-2/#findComment-2309185 Share on other sites More sharing options...
mhaeuser Posted October 29, 2016 Share Posted October 29, 2016 Is there a guide to build your UsbKbDxe? afaik it is automatically built with Clover. Link to comment https://www.insanelymac.com/forum/topic/317290-filevault-2/#findComment-2309190 Share on other sites More sharing options...
Slice Posted October 30, 2016 Share Posted October 30, 2016 I'm using Intel+AMD (black screen during boot) solution for a working sleep. When I enable FV2 Will I have black screen while typing password ? Yes, you will have black screen while typing password. Moreover, there can be one caveat. I initially have two users on the screen and I have to choose one of them by mouse and only then type password. But you can't use mouse on black screen. I also using Intel+AMD for working sleep. And I have a monitor with two entry. First entry for Intel, second for AMD with a simple switch between two screens. 1 Link to comment https://www.insanelymac.com/forum/topic/317290-filevault-2/#findComment-2309551 Share on other sites More sharing options...
D-an-W Posted October 30, 2016 Share Posted October 30, 2016 Does Clover now install all the files required in Drivers64UEFI meaning I just have to enable FileVault via System Preferences > Security and Privacy and reboot letting Clover do it's thing? Files currently in Drivers64UEFI: Link to comment https://www.insanelymac.com/forum/topic/317290-filevault-2/#findComment-2309554 Share on other sites More sharing options...
Slice Posted October 30, 2016 Share Posted October 30, 2016 Does Clover now install all the files required in Drivers64UEFI meaning I just have to enable FileVault via System Preferences > Security and Privacy and reboot letting Clover do it's thing? Files currently in Drivers64UEFI: Screen Shot 2016-10-30 at 05.19.07.png No, UsbKbDxe or other special keyboard driver needed. FV2 uses own keyboard interface and can't use UEFI BIOS keyboard driver. 1 Link to comment https://www.insanelymac.com/forum/topic/317290-filevault-2/#findComment-2309562 Share on other sites More sharing options...
D-an-W Posted October 30, 2016 Share Posted October 30, 2016 Good morning Slice and thanks, I added this one... If I have a password enabled when logging into Sierra, will I get two password prompts when FileVault is enabled? Link to comment https://www.insanelymac.com/forum/topic/317290-filevault-2/#findComment-2309563 Share on other sites More sharing options...
Slice Posted October 30, 2016 Share Posted October 30, 2016 Good morning Slice and thanks, I added this one... Screen Shot 2016-10-30 at 05.35.56.png If I have a password enabled when logging into Sierra, will I get two password prompts when FileVault is enabled? I think once. 1 Link to comment https://www.insanelymac.com/forum/topic/317290-filevault-2/#findComment-2309569 Share on other sites More sharing options...
D-an-W Posted October 30, 2016 Share Posted October 30, 2016 Ok, that didn't go so well. I can't get past the Recovery screen now having let FileVault reboot the computer. How do I access the Clover GUI if timeout is set to 0 please? Link to comment https://www.insanelymac.com/forum/topic/317290-filevault-2/#findComment-2309574 Share on other sites More sharing options...
krzyssp Posted October 30, 2016 Share Posted October 30, 2016 How does it work with Bluetooth keyboards (for example Apple Magic Keyboard)? Link to comment https://www.insanelymac.com/forum/topic/317290-filevault-2/#findComment-2309593 Share on other sites More sharing options...
smolderas Posted October 30, 2016 Share Posted October 30, 2016 How does it work with Bluetooth keyboards (for example Apple Magic Keyboard)? They should work, if you can use them in your BIOS for example. Link to comment https://www.insanelymac.com/forum/topic/317290-filevault-2/#findComment-2309661 Share on other sites More sharing options...
vit9696 Posted October 30, 2016 Author Share Posted October 30, 2016 AptioInputFix work for me. Is there any AptioInputFix without debug mode before Clover menu ?I will build one and once the bugs are ironed out... 2 Link to comment https://www.insanelymac.com/forum/topic/317290-filevault-2/#findComment-2309713 Share on other sites More sharing options...
D-an-W Posted October 30, 2016 Share Posted October 30, 2016 How does it work with Bluetooth keyboards (for example Apple Magic Keyboard)? You have to have AptioInputFix.efi present for Apple Bluetooth Keyboards to work, I just tested this (Not tested the alternative keyboard driver). Once FV2 is enabled do you have to always boot from the "Boot macOS from Recovery HD" option that appears in the Clover menu? Link to comment https://www.insanelymac.com/forum/topic/317290-filevault-2/#findComment-2309733 Share on other sites More sharing options...
mhaeuser Posted October 30, 2016 Share Posted October 30, 2016 Once FV2 is enabled do you have to always boot from the "Boot macOS from Recovery HD" option that appears in the Clover menu? Yes. EDIT: Do I see it wrong or is UsbKbDxe placed in drivers64 for legacy boot? What sense does that make? Just replace the TianoCore one in the DUET image, that will solve the issue of having to reconnect the keyboard on every boot... Link to comment https://www.insanelymac.com/forum/topic/317290-filevault-2/#findComment-2309878 Share on other sites More sharing options...
Recommended Posts