Updated decryption documentation needed for FileVault 2

Originator:rtrouton
Number:rdar://14149364 Date Originated:6-13-2013
Status:Closed Resolved:
Product:OS X Product Version:10.8.4 Build 12E55
Classification:Security Reproducible:Not Applicable
 
Summary:

You can decrypt from the 10.8.4, but you need to unlock the volume first. Up until 10.8.3, you could run the decrypt command without first needing to unlock. 

I had to figure the new behavior using NDA-covered methods, as the 10.8.4 error message is not very helpful:

10.8.4 error message - "The given UUID is not a CoreStorage Logical Volume UUID"

Existing bugs filed, reference bug IDs 14099380 and 14099359

Blog post on new unlock-then-decrypt behavior: 

http://derflounder.wordpress.com/2013/06/11/decrypting-filevault-2-on-mac-os-x-10-8-4-unlock-first-then-decrypt/

Steps to Reproduce:

N/A

Expected Results:

N/A

Actual Results:

N/A

Regression:

N/A

Notes:

Requesting documentation (man page update for diskutil and KBase article) for FileVault 2's new decryption behavior.

Comments

Apple closed bug on 07-Aug-2013

07-Aug-2013 12:51 PM Apple Developer Bug Reporting Team : Engineering has provided the following:

fdesetup has had changes, that was all. There are no plans to revise the documentation for 10.8.

We are closing this report.

If you have questions regarding the resolution of this issue, please update your bug report with them.

Please be sure to regularly check new Apple releases for any updates that might affect this issue.

By rtrouton at Aug. 7, 2013, 4:56 p.m. (reply...)

Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!