Shawn Brown - 2023-12-05

Hello, Running Mac Mini server - with attached Drobo 5D that is a 70TB // 64 TB Veracrypt container (regular volume). Container used everyday - for about 1/4 TB of backup. We had to relocate the machine and shut down the drobo properly - closed and dismounted the container - (I am getting my BA in cybersecurity - so my knowledge of these matters is above average - just to weed out the answers you guys might give a noob). I have been using Veracrypt/TrueCrypt with my Macs over 10 years. Never an issue - I rave and push veracrypt to anyone who asks about this kind of thing.

Well my container is AES SHA-512 encyption, to keyfiles, no PIM, no frills, no hidden volume.

Upon reconnecting (all software was updated a week ago - no issues after small ventura update - and several restarts) there was no updates or new software updated in conjunction with the move of equipment (I moved only peripherals - wires, etc--the MacMini and Drobo never left the rack) I go to open the container and get the Incorrect Password (a.k.a. 9170) error.

What I have done - tried restoring headers - tried Mac DiskUtil firstaid
upgraded to 1.26.7 (was at 1.25.9 - the container was only made on Aug 23, 2023 using 1.25.9 for MacOs)
downgraded to 1.17 after reading about some encryption method that went away that could be causing me a headache, but should go away by using 1.17 - but it didnt work for me - problem persists

what my plan of attack is

try to mount the disk without the filesystem using terminal and try and manually decrypt the container and repair the header

then i will try this:

use my windows machine and do this https://superuser.com/questions/1712444/veracrypt-mountvolume9170-error?rq=1

-Add Veracrypt.exe into trusted programms in Windows 10 or newer otherwise the programm is not able to decrypt files or hard Disks it won't work properly!!

Update and Safety -> Windows Security -> Ransomware Protection -> Allow Acces through App and then choose last blocked app or Veracrypt.exe !!!!

-Volume operation recover Volume head in Veracrypt -> Volume Operation

Lastly -- I will try to use Passware Forensics to decrypt the container and extract the data, and start over.

By the way - I do have a backup of my data, of course, on drobo #2 - daisychained to Drobo #1 - but it has the same problem - so whatever happened copied over to the backup - :( ((sad face))

Please any help would be appreciated - I am starting to freak out and look for my stress ball and anxiety meds.......