up vote 1 down vote favorite
share [g+] share [fb]

How can I change/replace the passphrase of an encrypted eli provider in FreeBSD? Do I have to recreate the entire provider and copy data, or is there a simpler and faster way?

I've looked in the man pages (which leads me to think there may be some way of doing this through geli init) and googled it, but can't find any definite answer.

link|improve this question
83% accept rate
feedback

1 Answer

up vote 1 down vote accepted

Someone tried it, but failed. Don't remember who but it was some 2 years ago. If you want to be safe, do the copy and re-init.

I just read this on a dead google search result (google ddnt have it cached, but the excerpt still showed):

geli detach /dev/md9

and then

geli setkey ...

But i won't guarantee that everything will be fine.

This also seems to be the way for changing from passphrase to keyfiles.

link|improve this answer
Hmmmm, I hope there's another answer out there, because that's rather timeconsuming with big volumes. But thanks anyway. – poplitea Oct 9 '11 at 2:05
Thank you, that's it. Tested, and it works -- at least for me in this test-instance. – poplitea Oct 9 '11 at 3:13
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.