All right, so in this lesson, what we're going to do is we're going to decrypt the disk so we can
back up our data off of the disk and we're going to do is we're basically you would do this procedure
if all of the firewall users on the system didn't have their password.
And the only way to decrypt is by using the key.
Now, let's just say our Moha, the end user, forgot their password and they can't decrypt the system.
We're in front of this system.
But the administrator account is also a firewall user.
I could just boot up with file vault, then log out, log in as McGarvey and backup all the data.
So by going into recovery mode, which we're right now, the only reason to do this would be is if all
firewall users have forgotten their password and you can only unlock the disk by decrypting with the
key.
All right.
So let's go to the terminal.
And the first thing that we want to do is take a look at our volumes and we can see that our Macintosh
hard drive is not available.
And that is because, of course, it's encrypted.
Next thing we want to do is you attach.
And what we're going to do is we're going to attach the disk image that has the institutional, private
and public.
All right, so the only way to decrypt is with this key, and like we said, we probably don't want
this key to be in a public place.
So you could move it to an accessible server only when you need it and then remove it when it's not
needed.
All right.
So the next thing is that we want to do security unlock keychain and then the path to our.
Our keychain file, so this is going to basically unlock the key chain and so now it's asking us for
the password that we use to create the key chain.
So let's go ahead and enter that.
All right, and so now the keychain is unlocked.
Now, finally, what we need to do is we need to unlock the volume.
So we're going to go ahead and unlock volume Macintosh hard drive and point it to our recovery key chain.
And give it the path.
All right, so now we're unlocked and if we go into volumes, we should see Macintosh hard drive and
if we go to users, we'll see all of our users.
And so now what we can do is we can attach an external hard drive and then we should be able to go ahead
and copy the entire profile to our external hard drive so that you could do something like Sepi heightH
in our volumes Macintosh Hard Drive users McGarvey and then give it to the path of your external hard
drive and then you'd end up with all of their data.
All right.
So that's how you can decrypt a hard drive and recover the data when you don't have any of the passwords
to any of the file users.