Encrypted HSP+ volu...
 
Notifications
Clear all

Encrypted HSP+ volume not showing up

(@danbo99)
New Member Customer

When I attempt to make a volume that is Encrypted HSP+ it never seems to work.

I am unable to mount the disk. I cannot see the disk on my iMac. And in SoftRaid lite when I click on the volume and select resize volume I get an error message that the volume is not initialized. What am I doing wrong?

Quote
Topic starter Posted : 14/11/2015 11:21 am
(@softraid-support)
Member Admin

We are sorry, this is a bug. We were testing this code in the 5.1 beta, but could not make it work, due to limitations in Core Storage.

We did not remove this code when releasing the final version of SoftRAID. Sorry for the confusion, this will be removed in the next update.

We are trying to get a solution to encryption working and are searching for alternatives, it is an important feature and we do want to properly support encrypted volumes.

ReplyQuote
Posted : 14/11/2015 1:04 pm
(@tim-rohrer)
Active Member Customer

Good morning,

Please elaborate on the limitation in Core Storage. I was able to use the cli to create an encrypted cs volume.

Thanks.

tim.rohrer

We are sorry, this is a bug. We were testing this code in the 5.1 beta, but could not make it work, due to limitations in Core Storage.

We did not remove this code when releasing the final version of SoftRAID. Sorry for the confusion, this will be removed in the next update.

We are trying to get a solution to encryption working and are searching for alternatives, it is an important feature and we do want to properly support encrypted volumes.

ReplyQuote
Posted : 12/01/2016 10:38 am
(@softraid-support)
Member Admin

If you found a way to make a working Core Storage encrypted volume layer on top of a SoftRAID volume, please post your steps and we will try to replicate it in house.

ReplyQuote
Posted : 12/01/2016 11:37 am
(@tim-rohrer)
Active Member Customer

I can't say I made it work "on top of a SoftRAID volume." I can experiment with this more, but what I have done is used diskutil cs commands to create an encrypted volume from a specified diskX. So, I don't understand your comment when you said SoftRAID couldn't create encrypted volumes due to "limitations in Core Storage."

Without understanding your comments, it seems to me the issue rests with SoftRAID. If I'm wrong and there is something amiss with Core Storage in OS X, I'd like to understand it so I can be part of the team that leans on Apple to fix the issue. I too want to use SoftRAID to create encrypted volumes for offsite archives.

FYI, the commands I used to create an encrypted volume from a terminal are pretty basic:
1) diskutil cs create VolumeName diskX DiskY [yes, this appears to reinitialize the disks outside of SoftRAID]
2) diskutil cs list to get the logical volume UID of the newly created volume.
3) diskutil cs createVolume UID jhfs+ NewVolumeNameofYourChoice 100% -stdinpassphrase

But, I think you were really asking me if I had done it while keeping the original SoftRAID volume intact, and I can't say I can.

Thanks,

Tim

If you found a way to make a working Core Storage encrypted volume layer on top of a SoftRAID volume, please post your steps and we will try to replicate it in house.

ReplyQuote
Posted : 12/01/2016 4:58 pm
(@tim-rohrer)
Active Member Customer

The good news: I may have an approach for you.
The bad news: I may have accidentally knocked off one of two disks I had in a SoftRAID striped RAID :-(. Therefore, I won't do any more testing unless I get a vm running in a manner that would let me test this.

Here are the steps I took:

1) Initialize the disk in SoftRAID and create a volume.
2) Unmount that volume and exit SoftRAID. I think you might also need to specifically unmount the virtual volume as not doing so before continuing may cause the computer to panic/reboot.
3) Use diskutil list to get the disk (X) and slice (Y) number of the large partition, then diskutil cs create myLVG diskXsY. As an interim, I opened SoftRAID to see how the disk was recognized. At this stage, the Disk was visible, the Volume was not.
4) Use diskutil cs createVolume UID (of the LVG) jhfs+ DesiredVolumeName 100% -stdinpassphrase.

Back in SoftRAID, the encrypted FileVault volume) now shows up with the green line back to its source disk and a new virtual disk shows up as an encrypted Logical Volume on diskXsY.

As I said, I got this to work but have concerns about kernel panics when doing the first cs create. More testing is definitely needed.

As I said, I'll try later to get a safer test platform set up. to do this again. Unfortunately, the panic/reboot is too dangerous for me on this system.

ReplyQuote
Posted : 12/01/2016 5:48 pm
(@softraid-support)
Member Admin

What we found was the API that Core Storage uses to implement encryption on the volume was broken for non standard Apple volumes (at least for SoftRAID volumes). We tried last fall to find a work around for this but could not. I believe we have reported this to the RADAR database. If I can get more detailed information for you, I will post it. It will probably take a few days.

ReplyQuote
Posted : 12/01/2016 6:01 pm
(@criley)
New Member Customer

Hi,
Is there any update on SoftRAID and FileVault?

It also said the recovery partition was limited, but that is less of an issue.

Thanks!

ReplyQuote
Posted : 27/02/2016 12:32 pm
(@softraid-support)
Member Admin

Filevault does not have functional API's yet for us to work with. It does not appear as it this will change.

We will have an alternative solution at some point, we understand the need for this feature.

Apple does not enable recovery partitions for non standard volumes. Unless that changes, there will never be a "recovery partition" for a SoftRAID disk. Use a USB thumbdrive for any management of your volumes/disks. this also allows you to install any maintenance tools on the thumbdrive.

ReplyQuote
Posted : 27/02/2016 12:57 pm
Share:
close
open