Apple Fusion Drive - libfvde_encrypted_metadata_read_type_0x001a: unable to retrieve logical volume descriptor with object identifier: 1141
Opened this issue · 0 comments
arcticforensics commented
I'm attempting to use libfvde 20220420 (Windows) to decrypt an Apple Fusion drive with FileVault2 encryption - fvdemount returns; "libfvde_encrypted_metadata_read_type_0x001a: unable to retrieve logical volume descriptor with object identifier: 1141".
See debug text file attached.
Command-line;
fvdemount -v -e d:\EncryptedRoot.plist.wipekey -p "#######" -o 209735680 \\.\physicaldrive3 \\.\physicaldrive4 mount_point