LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   HowTo Access Former encrypted Internal HD as an External HD (https://www.linuxquestions.org/questions/linux-security-4/howto-access-former-encrypted-internal-hd-as-an-external-hd-4175501548/)

GNewbie 04-13-2014 01:12 PM

HowTo Access Former encrypted Internal HD as an External HD
 
Hi All,

I had an encrypted internal drive (with Linux Mint) associated with a motherboard that went bad. It had been a while since I'd logged in and didn't recall the password. Well I know the password now, I have the cable to attach the legacy connectors via USB and I can connect the drive so that the icons show up on my desktop.

What I don't know how to do is to find the place where I can enter the password and decrypt the drives so I can access the information on them.

Any help is much appreciated.

John VV 04-13-2014 05:46 PM

what was used in the first place to encrypt it ?
the operating system installer ?
truecrypt?
something else ?

and did you also save the old keys ( if needed) ?
if not , you might never open it

GNewbie 04-14-2014 01:50 AM

Quote:

Originally Posted by John VV (Post 5151928)
what was used in the first place to encrypt it ?
the operating system installer ?
truecrypt?
something else ?

and did you also save the old keys ( if needed) ?
if not , you might never open it

Thanks for the reply. It was the encryption that came with the operating system. I knew the basic schema of the password and actually found a way to run through a text list of passwords. It was rough going until I ran across my password - so I have it now. It was in line with what I thought it was, but it might have taken me a while to actually hit upon it by trial and error.

I was actually able to use "sudo ecryptfs-recover-private" to recover the drive, but I didn't see anything on it. I'm wondering if it was a mount issue. I have to spend some more time working on it. But I did make some progress - and that's a good thing.

GNewbie 04-14-2014 09:59 AM

I'm using ecryptfs-recover-private and I get the following message...

INFO: Enter your LOGIN passphrase...
Passphrase:
Inserted auth tok with sig [6cd06deca975466d] into the user session keyring
INFO: Success! Private data mounted read-only at [/tmp/ecryptfs.cTJGNJCO].
INFO: Found [/media/[alphanumerichere]/.ecryptfs/[homedrivename]/.Private].
Try to recover this directory? [Y/n]:

I then input sudo thunar and navigated the home directory.

There were two icons:
1. Access-Your-Private-Data.desktop
2. README.txt

When I double clicked on the README.txt file, it read:

THIS DIRECTORY HAS BEEN UNMOUNTED TO PROTECT YOUR DATA.

---
From the graphical desktop, click on:
"Access Your Private Data"

or

From the command line, run:
ecryptfs-mount-private
---

When I put ecryptfs-mount-private into the command line, the output read:

ERROR: Encrypted private directory is not setup properly

I'm stumped at this point.

Any help would be appreciated.

TIA...


All times are GMT -5. The time now is 08:18 AM.