SOLVED: Re: Blocked out from reinstalling by system konsole GELI passphrase request
John Gaskill <[email protected]> Mon, 20 Jul 2026 13:54:58 +0000 (UTC)
| Newsgroups | gmane.os.freebsd.questions |
|---|---|
| Message-ID | <[email protected]> |
------=_Part_331890_594926187.1784555698747
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Since the hardware and FreeBSD/ZFS refused under any circumstances to allo=
w
a reinstallation or other access to the system without requested passwords,=
I
used a tool from my OS/2 era, called DFSee, to create a Linux DFSPup64 thum=
b
drive which got me on as I had installed the Linux support when doing the
installation.
From that point I ran some reports for my own benefits and files, then wipe=
d the
drives to blank so I can reinstall FreeBSD. Clean shutdown afterwards.=20
Good night's sleep and back to the installation this morning.
No encryption during the installation this time.
On Tuesday, July 14, 2026 at 04:26:36 PM PDT, Edward Sanford Sutton, I=
II <[email protected]> wrote: =20
=20
On 7/14/26 15:51, John Gaskill wrote:
> After getting 15.1 installed on my new system, a closer inspection=20
> revealed it did not go down as I thought I had specified, so I wiped out=
=20
> the old install and reinstalled with more of what I wanted.
>=20
> All new AMD/ASUS system with lots of ram, good CPU and SSDs.=C2=A0 Follow=
ed=20
> instructions through the install menus and set up a ZFSRAID1 file system.
>=20
> I probably should not have opted for GELI encryption, but did, kept=20
> accurate record of input and successful passphrases, etc. and finished=20
> installation.
>=20
> When attempting to reboot into FreeBSD afterwards, the following screen=
=20
> appeared and entering the strong passphrase correctly does not allow me=
=20
> to pass and get further.
Is it re-prompting for the password after you enter it or is it doing=20
something else? At 3 failed attempts to get a password to decrypt it=20
should move on to the next device(/partition?). With layouts using=20
labels/IDs instead of raw device entries I've had geli prompt across all=20
detected variations when trying to fail attempts but not sure if the=20
early boot prompts have that too.
If you made changes such as using a different keyboard layout then you=20
need to be aware that such layouts are not present when prompted for the=20
password before the kernel and such is loaded.
> I would like to use "gpart destroy -F" to clear the three SSDs of the=20
> ZFS systems and FreeBSD installation and reinstall it without the=20
> encryption and other hardening options I selected last time around.
As long as you can boot your install media, you should be able to use=20
alt+F# where different #s go to different terminals and some will take=20
you straight to an interactive prompt. From there you can issue whatever=20
commands you desire including "camcontrol/nvmecontrol format/sanitize"=20
or "dd" operations if you want to go further than just changing/erasing=20
partition data.
Asus usually supports pressing F8 during boot to get a menu of bootable=20
devices for a one time override or you can temporarily/permanently=20
change boot device order in the UEFI (both F2 or del should enter if I=20
remember Asus right). If you have booted other media and still get the=20
password prompt, entering incorrect values 3 times should have it move=20
on. A more drastic choice would be disconnecting the disk until bootup=20
has gone further but UEFI settings and hardware needs to support hot=20
swapping to connect it after power on. You could also use another OS=20
version or type that doesn't have GELI support to get past it getting=20
stuck on a GELI password.
> Not much out there on this subject from what I can find.
>=20
> Suggestions please on getting past this screen?
>=20
> Tried UEFI shell but although I can render a list of devices, I don't=20
> seem to be able to mount them.
>=20
> Yahoo Mail: Search, Organize, Conquer <https://=20
> mail.onelink.me/107872968?=20
> pid=3Dnativeplacement&c=3DUS_Acquisition_YMktg_315_SearchOrgConquer_Email=
Signature&af_sub1=3DAcquisition&af_sub2=3DUS_YMktg&af_sub3=3D&af_sub4=3D100=
002039&af_sub5=3DC01_Email_Static_&af_ios_store_cpp=3D0c38e4b0-a27e-40f9-a2=
11-f4e2de32ab91&af_android_url=3Dhttps://play.google.com/store/apps/details=
?id=3Dcom.yahoo.mobile.client.android.mail&listing=3Dsearch_organize_conque=
r>
=20
------=_Part_331890_594926187.1784555698747
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
<div> Since the hardware and FreeBSD/ZFS refused under any c=
ircumstances to allow<br>a reinstallation or other access to the system wit=
hout requested passwords, I<br>used a tool from my OS/2 era, called DFSee, =
to create a Linux DFSPup64 thumb<br>drive which got me on as I had installe=
d the Linux support when doing the<br>installation.<br><br>From that point =
I ran some reports for my own benefits and files, then wiped the<br>drives =
to blank so I can reinstall FreeBSD. Clean shutdown afterwards. <br><br>Go=
od night's sleep and back to the installation this morning.<br><br>No e=
ncryption during the installation this time.<br><br><br> </div> =
<div class=3D"yahoo_quoted" style=3D"margin:10px 0px 0px 0.8ex;b=
order-left:1px solid #ccc;padding-left:1ex;"> <div s=
tyle=3D"font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-siz=
e:13px;color:#26282a;"> <div> =
On Tuesday, July 14, 2026 at 04:26:36 PM PDT, Edward Sanford Sutto=
n, III <[email protected]> wrote: </div> =
<div><br></div> <div><br></div> =
<div><div dir=3D"ltr">On 7/14/26 15:51=
, John Gaskill wrote:<br></div><div dir=3D"ltr">> After getting 15.1 ins=
talled on my new system, a closer inspection <br></div><div dir=3D"ltr">>=
; revealed it did not go down as I thought I had specified, so I wiped out =
<br></div><div dir=3D"ltr">> the old install and reinstalled with more o=
f what I wanted.<br></div><div dir=3D"ltr">> <br></div><div dir=3D"ltr">=
> All new AMD/ASUS system with lots of ram, good CPU and SSDs. Fol=
lowed <br></div><div dir=3D"ltr">> instructions through the install menu=
s and set up a ZFSRAID1 file system.<br></div><div dir=3D"ltr">> <br></d=
iv><div dir=3D"ltr">> I probably should not have opted for GELI encrypti=
on, but did, kept <br></div><div dir=3D"ltr">> accurate record of input =
and successful passphrases, etc. and finished <br></div><div dir=3D"ltr">&g=
t; installation.<br></div><div dir=3D"ltr">> <br></div><div dir=3D"ltr">=
> When attempting to reboot into FreeBSD afterwards, the following scree=
n <br></div><div dir=3D"ltr">> appeared and entering the strong passphra=
se correctly does not allow me <br></div><div dir=3D"ltr">> to pass and =
get further.<br></div><div dir=3D"ltr"><br></div><div dir=3D"ltr">Is it re-=
prompting for the password after you enter it or is it doing <br></div><div=
dir=3D"ltr">something else? At 3 failed attempts to get a password to decr=
ypt it <br></div><div dir=3D"ltr">should move on to the next device(/partit=
ion?). With layouts using <br></div><div dir=3D"ltr">labels/IDs instead of =
raw device entries I've had geli prompt across all <br></div><div dir=3D"lt=
r">detected variations when trying to fail attempts but not sure if the <br=
></div><div dir=3D"ltr">early boot prompts have that too.<br></div><div dir=
=3D"ltr"><br></div><div dir=3D"ltr">If you made changes such as using a dif=
ferent keyboard layout then you <br></div><div dir=3D"ltr">need to be aware=
that such layouts are not present when prompted for the <br></div><div dir=
=3D"ltr">password before the kernel and such is loaded.<br></div><div dir=
=3D"ltr"><br></div><div dir=3D"ltr">> I would like to use "gpart destroy=
-F" to clear the three SSDs of the <br></div><div dir=3D"ltr">> ZFS sys=
tems and FreeBSD installation and reinstall it without the <br></div><div d=
ir=3D"ltr">> encryption and other hardening options I selected last time=
around.<br></div><div dir=3D"ltr"><br></div><div dir=3D"ltr">As long as yo=
u can boot your install media, you should be able to use <br></div><div dir=
=3D"ltr">alt+F# where different #s go to different terminals and some will =
take <br></div><div dir=3D"ltr">you straight to an interactive prompt. From=
there you can issue whatever <br></div><div dir=3D"ltr">commands you desir=
e including "camcontrol/nvmecontrol format/sanitize" <br></div><div dir=3D"=
ltr">or "dd" operations if you want to go further than just changing/erasin=
g <br></div><div dir=3D"ltr">partition data.<br></div><div dir=3D"ltr"><br>=
</div><div dir=3D"ltr">Asus usually supports pressing F8 during boot to get=
a menu of bootable <br></div><div dir=3D"ltr">devices for a one time overr=
ide or you can temporarily/permanently <br></div><div dir=3D"ltr">change bo=
ot device order in the UEFI (both F2 or del should enter if I <br></div><di=
v dir=3D"ltr">remember Asus right). If you have booted other media and stil=
l get the <br></div><div dir=3D"ltr">password prompt, entering incorrect va=
lues 3 times should have it move <br></div><div dir=3D"ltr">on. A more dras=
tic choice would be disconnecting the disk until bootup <br></div><div dir=
=3D"ltr">has gone further but UEFI settings and hardware needs to support h=
ot <br></div><div dir=3D"ltr">swapping to connect it after power on. You co=
uld also use another OS <br></div><div dir=3D"ltr">version or type that doe=
sn't have GELI support to get past it getting <br></div><div dir=3D"ltr">st=
uck on a GELI password.<br></div><div dir=3D"ltr"><br></div><div dir=3D"ltr=
">> Not much out there on this subject from what I can find.<br></div><d=
iv dir=3D"ltr">> <br></div><div dir=3D"ltr">> Suggestions please on g=
etting past this screen?<br></div><div dir=3D"ltr">> <br></div><div dir=
=3D"ltr">> Tried UEFI shell but although I can render a list of devices,=
I don't <br></div><div dir=3D"ltr">> seem to be able to mount them.<br>=
</div><div dir=3D"ltr">> <br></div><div dir=3D"ltr">> Yahoo Mail: Sea=
rch, Organize, Conquer <https:// <br></div><div dir=3D"ltr">> mail.on=
elink.me/107872968? <br></div><div dir=3D"ltr">> pid=3Dnativeplacement&a=
mp;c=3DUS_Acquisition_YMktg_315_SearchOrgConquer_EmailSignature&af_sub1=
=3DAcquisition&af_sub2=3DUS_YMktg&af_sub3=3D&af_sub4=3D10000203=
9&af_sub5=3DC01_Email_Static_&af_ios_store_cpp=3D0c38e4b0-a27e-40f9=
-a211-f4e2de32ab91&af_android_url=3Dhttps://play.google.com/store/apps/=
details?id=3Dcom.yahoo.mobile.client.android.mail&listing=3Dsearch_orga=
nize_conquer><br></div><div dir=3D"ltr"><br></div><div dir=3D"ltr"><br><=
/div></div> </div> </div>
------=_Part_331890_594926187.1784555698747--