0

My Mac mini failed recently, and after taking it to the Apple store, they said it was the logic board that failed, and it would be $350ish to replace, which was not worth it to me, so I took it back.

I want to recover the data off of the hard drive. I have the drive removed from the computer, and plugged into my laptop running Ubuntu 15.04/Windows 7 (dual boot) via USB3.

I have two partitions on the hard drive:

  • My Macintosh HD Partition, and
  • An encrypted partition with some sensitive documents

How can I mount this encrypted partition on my laptop (using Ubuntu or Windows, idc), and get the data off of it (I know the password that it was encrypted with)?

2
  • What was used to encrypt the partition? If FileVault and is using Core Storage it will be much easier to recover connected to a Mac. Commented Jul 12, 2015 at 2:08
  • @user3439894 I don't remember Commented Jul 12, 2015 at 14:21

1 Answer 1

1

You have two problems: FileVault whole disk encryption and the HFS+ filesystem. HFS+ is not difficult to deal with in Ubuntu, but I've seen no readily accessible tools to access a FileVault encrypted volume even when you know the password.

It'll be far easier to use a Mac to turn off FileVault. Disk Utility can unlock and decrypt the drive. The folks at the Apple Store might let you use one of the computers in the store to decrypt the drive, otherwise you might have to borrow a friends Mac for a while. It'd be best to use the same version of OS X or newer.

1
  • So, I got onto a mac, and I can't see the contents of the drive. When I first plugged in the drive, it asked for the password, which I typed in. Then, I went to Finder, and nothing came up, so I pressed 'Decrypt CRYPTDAT' (CRYPTDAT is the partition name), and there is still nothing. However, Disk Utility says I've used 38.2 Mb and there are 19 folders. Commented Jul 12, 2015 at 14:22

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .