Skip to content

Apple Fusion Drive - libfvde_encrypted_metadata_read_type_0x001a: unable to retrieve logical volume descriptor with object identifier: 1141 #56

@arcticforensics

Description

@arcticforensics

I'm attempting to use libfvde 20220420 (Windows) to decrypt an Apple Fusion drive with FileVault2 encryption - fvdemount returns; "libfvde_encrypted_metadata_read_type_0x001a: unable to retrieve logical volume descriptor with object identifier: 1141".
See debug text file attached.

Command-line;
fvdemount -v -e d:\EncryptedRoot.plist.wipekey -p "#######" -o 209735680 \\.\physicaldrive3 \\.\physicaldrive4 mount_point

debug.txt.gz

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions