Re: Blocked out from reinstalling by system konsole GELI passphrase request

John Gaskill <[email protected]> Wed, 15 Jul 2026 13:12:05 +0000 (UTC)
Newsgroups gmane.os.freebsd.questions
Message-ID <[email protected]>
------=_Part_1027272_1110807912.1784121125803
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

 >> After getting 15.1 installed on my new system, a closer inspection
>> revealed it did not go down as I thought I had specified, so I wiped out
>> the old install and reinstalled with more of what I wanted.
>>
>> All new AMD/ASUS system with lots of ram, good CPU and SSDs.=C2=A0 Follo=
wed
> instructions through the install menus and set up a ZFSRAID1 file system.
>>
>> I probably should not have opted for GELI encryption, but did, kept
>> accurate record of input and successful passphrases, etc. and finished
>> installation.
>>
>> When attempting to reboot into FreeBSD afterwards, the following screen
>> appeared and entering the strong passphrase correctly does not allow me
>> to pass and get further.

> Is it re-prompting for the password after you enter it or is it doing
> something else? At 3 failed attempts to get a password to decrypt it
>.should move on to the next device(/partition?). With layouts using
> labels/IDs instead of raw device entries I've had geli prompt across all
> detected variations when trying to fail attempts but not sure if the
> early boot prompts have that too.

After entering the password it returns "Bad password Request" and allows tw=
o
more attempts before changing to another device/partition id and
repeating the process.

If I let it wait or doesn't respond quickly enough, it returns to a system =
on
login screen.

> If you made changes such as using a different keyboard layout then you
> need to be aware that such layouts are not present when prompted for the
> password before the kernel and such is loaded.

>> I would like to use "gpart destroy -F" to clear the three SSDs of the
>> ZFS systems and FreeBSD installation and reinstall it without the
>> encryption and other hardening options I selected last time around.

> As long as you can boot your install media, you should be able to use
> alt+F# where different #s go to different terminals and some will take
> you straight to an interactive prompt. From there you can issue whatever
> commands you desire including "camcontrol/nvmecontrol format/sanitize"
> or "dd" operations if you want to go further than just changing/erasing
> partition data.

That is the problem. I am unable to boot the install media.
Normally it would boot by itself after signing in with the install media US=
B drive
in place.

Thanks for the suggestions. I will attempt and get back to the list.

> Asus usually supports pressing F8 during boot to get a menu of bootable
> devices for a one time override or you can temporarily/permanently
> change boot device order in the UEFI (both F2 or del should enter if I
> remember Asus right). If you have booted other media and still get the
> password prompt, entering incorrect values 3 times should have it move
> on. A more drastic choice would be disconnecting the disk until bootup
> has gone further but UEFI settings and hardware needs to support hot
> swapping to connect it after power on. You could also use another OS
> version or type that doesn't have GELI support to get past it getting
> stuck on a GELI password.

>> Not much out there on this subject from what I can find.
>>
>> Suggestions please on getting past this screen?
>>
>> Tried UEFI shell but although I can render a list of devices, I don't
>> seem to be able to mount them.
>
 =20
------=_Part_1027272_1110807912.1784121125803
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div>                &gt;&gt; After getting 15.1 installed on my new system=
, a closer inspection<br>&gt;&gt; revealed it did not go down as I thought =
I had specified, so I wiped out<br>&gt;&gt; the old install and reinstalled=
 with more of what I wanted.<br>&gt;&gt;<br>&gt;&gt; All new AMD/ASUS syste=
m with lots of ram, good CPU and SSDs.=C2=A0 Followed<br>&gt; instructions =
through the install menus and set up a ZFSRAID1 file system.<br>&gt;&gt;<br=
>&gt;&gt; I probably should not have opted for GELI encryption, but did, ke=
pt<br>&gt;&gt; accurate record of input and successful passphrases, etc. an=
d finished<br>&gt;&gt; installation.<br>&gt;&gt;<br>&gt;&gt; When attemptin=
g to reboot into FreeBSD afterwards, the following screen<br>&gt;&gt; appea=
red and entering the strong passphrase correctly does not allow me<br>&gt;&=
gt; to pass and get further.<br><br>&gt; Is it re-prompting for the passwor=
d after you enter it or is it doing<br>&gt; something else? At 3 failed att=
empts to get a password to decrypt it<br>&gt;.should move on to the next de=
vice(/partition?). With layouts using<br>&gt; labels/IDs instead of raw dev=
ice entries I&#39;ve had geli prompt across all<br>&gt; detected variations=
 when trying to fail attempts but not sure if the<br>&gt; early boot prompt=
s have that too.<br><br>After entering the password it returns &quot;Bad pa=
ssword Request&quot; and allows two<br>more attempts before changing to ano=
ther device/partition id and<br>repeating the process.<br><br>If I let it w=
ait or doesn&#39;t respond quickly enough, it returns to a system on<br>log=
in screen.<br><br>&gt; If you made changes such as using a different keyboa=
rd layout then you<br>&gt; need to be aware that such layouts are not prese=
nt when prompted for the<br>&gt; password before the kernel and such is loa=
ded.<br><br>&gt;&gt; I would like to use &quot;gpart destroy -F&quot; to cl=
ear the three SSDs of the<br>&gt;&gt; ZFS systems and FreeBSD installation =
and reinstall it without the<br>&gt;&gt; encryption and other hardening opt=
ions I selected last time around.<br><br>&gt; As long as you can boot your =
install media, you should be able to use<br>&gt; alt+F# where different #s =
go to different terminals and some will take<br>&gt; you straight to an int=
eractive prompt. From there you can issue whatever<br>&gt; commands you des=
ire including &quot;camcontrol/nvmecontrol format/sanitize&quot;<br>&gt; or=
 &quot;dd&quot; operations if you want to go further than just changing/era=
sing<br>&gt; partition data.<br><br>That is the problem.  I am unable to bo=
ot the install media.<br>Normally it would boot by itself after signing in =
with the install media USB drive<br>in place.<br><br>Thanks for the suggest=
ions. I will attempt and get back to the list.<br><br>&gt; Asus usually sup=
ports pressing F8 during boot to get a menu of bootable<br>&gt; devices for=
 a one time override or you can temporarily/permanently<br>&gt; change boot=
 device order in the UEFI (both F2 or del should enter if I<br>&gt; remembe=
r Asus right). If you have booted other media and still get the<br>&gt; pas=
sword prompt, entering incorrect values 3 times should have it move<br>&gt;=
 on. A more drastic choice would be disconnecting the disk until bootup<br>=
&gt; has gone further but UEFI settings and hardware needs to support hot<b=
r>&gt; swapping to connect it after power on. You could also use another OS=
<br>&gt; version or type that doesn&#39;t have GELI support to get past it =
getting<br>&gt; stuck on a GELI password.<br><br>&gt;&gt; Not much out ther=
e on this subject from what I can find.<br>&gt;&gt;<br>&gt;&gt; Suggestions=
 please on getting past this screen?<br>&gt;&gt;<br>&gt;&gt; Tried UEFI she=
ll but although I can render a list of devices, I don&#39;t<br>&gt;&gt; see=
m to be able to mount them.<br>&gt;<br>            </div>           =20
------=_Part_1027272_1110807912.1784121125803--