• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Recovering data from a crashed FileVault encrypted drive

A

AlricLantra

Member
I'm trying to recover the contents of a friend's MacBook after her HD started developing bad sectors and no longer booted. Hooking the drive to my machine I was able to access all the files, however I ran into a snag: all her home directory contained was a .diskmounted file, and her .home directory contained a folder called home.sparsebundle, which contained 100GB worth of "bands" files, each 8mb.

I've been told this means her home directory was encrypted using FileVault. I've also been told this means its impossible to recover any of her data for her. Given that she has all the passwords, and that I have all the data, that's pretty frustrating. Does anybody know a way to mount this disk image and recover her documents?
 
No Time Machine backups, I take? FileVault volumes need to be backed up with TM while logged in with another user account. It can be restored, but basically it's just a big copy-back of the sparsebundle/bands.

If you can copy that all off, it's a start, but I'm not sure how you'd restore from there. Alternatively, can you pull the disk, mount it in another computer, and take an image of it? Try restoring it to a new disk and see if it works?
 
You must log in or register to reply here.

TRENDING THREADS

Back
Top