TS451+ Can't unlock encrypted volumes after power failure

Questions about SNMP, Power, System, Logs, disk, & RAID.
Post Reply
purzelby
New here
Posts: 3
Joined: Wed May 11, 2016 3:38 am

TS451+ Can't unlock encrypted volumes after power failure

Post by purzelby » Tue Feb 26, 2019 3:44 am

Hi everybody,
I have a TS-451+, OS 4.3.6.0805 with Vol1 unencrypted and 5 volumes encrypted.
Since a power failure 2 days ago I can't unlock my encrypted volumes, QNAP says "Encrytion key entered incorrectly", but I checked it many times, and it is the same since 3 years and worked fine after every update. All volumes have the same key.
4 days ago all volumes are unlocked and I used the regulary.
But after the power failure all volumes except Vol1 with the the system are locked.

Does anybody knows this behaviour? NAS is not reachable from the internet, and i only have 2 computers, which were off at the power failure. The HDDs should be in standby at this moment.
​/etc/hosts looks ok, 5 entries (localhost, docker, eth0, ...), no 0.0.0.0

I don't have the key files as I didn't know it is possible to export them - the QNAP-OS didn't tell me to do this when I encrypted the volumes.

How can I unlock the volumes at the command line? Maybe I can get more information there?

ein verzweifelter User, dessen letztes Backup 6 Wochen als ist, und der die Daten dringend braucht. (Ich habe zwar mit manchem gerechnet, aber nicht dass ich nicht mehr entsperren kann)

Thanks for the help
a very unlucky user, who need the data very urgent
(Yes, I know how to write backup, and what it means, but I didn't expect to get locked out).

iam@nas
Easy as a breeze
Posts: 267
Joined: Wed Jun 15, 2016 2:49 am

Re: TS451+ Can't unlock encrypted volumes after power failure

Post by iam@nas » Tue Feb 26, 2019 3:51 am

It seems you are looking for Mount QNAP encrypted volume. I didn't test it so far but it's on my TODO list.
I'm always afraid of a hardware failure and I do not want to mess with an encrypted QTS volume. I'd enjoy encryption without a backup to get the adrenaline kick.

purzelby
New here
Posts: 3
Joined: Wed May 11, 2016 3:38 am

[Resolved] TS451+ Can't unlock encrypted volumes after power failure

Post by purzelby » Wed Mar 06, 2019 3:46 am

Ok here is the summary with help of QNAP support.
Reason of the problem was, the superblock of all encrypted volumes was bad (or maybe only the second flash area on the DOM).
To decrypt the volumes by ssh use:
1. get Passphrase
# storage_util --encrypt_pwd pwd={my_password}
2. unlock
# cryptsetup -v luksOpen /dev/mapper/cachedev2 ce_cachedev2 <RETURN>
enter passphrase from 1.
3. create mount-dir
mkdir /share/CE_CACHEDEV2_DATA
4. Vol mounten
# mount -t ext4 /dev/mapper/ce_cachedev2 /share/CE_CACHEDEV2_DATA

do this again for all encrypted volumes /dev/mapper/ce_cachedevxxx

the plug USB-HDD in, mount (to /share/external/...) and use rsync to copy the data

After backup, check all volumes:
# e2fsck -f -v -C 0 /dev/mapper/cachedev1 or ce_cachedevx
maybe stop services before:
# /etc/init.d/services.sh stop

My problem was, syslog told me "The second boot area on the flash is corrupted". And I think this was the cause of all the trouble. I wasn't able to make a firmware-update from the Web-Admin-Console. But the following trick helped:
- shutdown NAS
- remove all HDDs
- start NAS
- make a firmwareupdate by QFinder
- shutdown NAS
- insert HDDs
- start NAS: you get a warning the firmware on flash is different to the firmware on HDD - just ignore this (for now)
- make a manual firmware update by the web console, reboot
and after this I was able to unlock all volumes, and no data has been gone

Post Reply

Return to “System & Disk Volume Management”