Encrypted HD, unable to login or boot

Joined
Sep 1, 2016
Messages
12
Reaction score
0
Points
1
Client brought me a Macbook Pro. It appears to be about 3-5 years old (RAM isn't soldered onboard.) and is running 10.10.

The laptop initially booted to the login screen, but I could not log into the primary user account. The login progress bar will make it about 1/3rd of the way and just stop. I've let it run overnight with no change. I can access the guest account easily, but only use Safari.

The drive does have encryption enabled (Filevault, I'm assuming). I've tried a few HD tests and it passes, so I am fairly sure the issue is with the encryption. Have booted to recovery mode and used Disk Utility. No problems mounting, unlocking, verifying, or repairing the drive via this method. However, nothing changed during a the normal boot.

There is an option to "turn encryption off" from the drive in Disk Utilities, but after trying that, the laptop fails to boot at all. It is stuck on the initial Apple logo loading screen and the bar makes it about 1/3rd before freezing, as before.

Have tried all the basics(resetting PRAM, SMC, safe boot, etc) without any luck. Plugging the drive into another Mac, either as an internal or external drive, throws up a kernel panic.

The only success I've had is booting the Macbook from an different external hard drive. I am able to access the internal drive's files without issue via Finder.

What else can I try?
 

IWT


Joined
Jan 23, 2009
Messages
10,287
Reaction score
2,230
Points
113
Location
Born Scotland. Worked all over UK. Live in Wales
Your Mac's Specs
M2 Max Studio Extra, 32GB memory, 4TB, Sonoma 14.4.1 Apple 5K Retina Studio Monitor
A warm welcome to Mac-Forums.

Your client, presumably, was the one who enabled FileVault (FV); and that would have required a PW and a BU Key. If this is correct, then that is the only person with the means to unlock/disable FV. And that would apply to the "Turn FV Off" within Disk Utility.

As far as I know, there is no way to bypass FV, to which various security agencies could probably testify.

You do say that you "assume" it is FV. What other form were you considering? And, once more, can your client not assist?

Others on the Forum may have suggestions; but I cannot see a way around this at the moment.

Ian
 
OP
T
Joined
Sep 1, 2016
Messages
12
Reaction score
0
Points
1
I assume filevault because I'm not a Mac expert. The user claims they do not have the knowledge nor the need to have enabled encryption, and are questioning if it was potentially caused by a virus. I do have the client's credentials and I'm not trying to bypass the encryption, just disable it.
 

chscag

Well-known member
Staff member
Admin
Joined
Jan 23, 2008
Messages
65,248
Reaction score
1,833
Points
113
Location
Keller, Texas
Your Mac's Specs
2017 27" iMac, 10.5" iPad Pro, iPhone 8, iPhone 11, iPhone 12 Mini, Numerous iPods, Monterey
The problem is that FileVault is the default for new installations of OS X and is recommended by Apple. Most new users would not notice it was turned on.
 
Joined
Nov 28, 2007
Messages
25,564
Reaction score
486
Points
83
Location
Blue Mountains NSW Australia
Your Mac's Specs
Silver M1 iMac 512/16/8/8 macOS 11.6
There are no MAc OS X viruses and there are no easy ways to circumvent File Vault which is precisely what is was designed for.

Have them take it to a Genius Bar.
 

Shop Amazon


Shop for your Apple, Mac, iPhone and other computer products on Amazon.
We are a participant in the Amazon Services LLC Associates Program, an affiliate program designed to provide a means for us to earn fees by linking to Amazon and affiliated sites.
Top