Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

How can I change/replace the passphrase of an encrypted eli provider in FreeBSD? Do I have to recreate the entire provider and copy data, or is there a simpler and faster way?

I've looked in the man pages (which leads me to think there may be some way of doing this through geli init) and googled it, but can't find any definite answer.

share|improve this question
add comment

1 Answer

up vote 1 down vote accepted

Someone tried it, but failed. Don't remember who but it was some 2 years ago. If you want to be safe, do the copy and re-init.

I just read this on a dead google search result (google ddnt have it cached, but the excerpt still showed):

geli detach /dev/md9

and then

geli setkey ...

But i won't guarantee that everything will be fine.

This also seems to be the way for changing from passphrase to keyfiles.

share|improve this answer
    
Hmmmm, I hope there's another answer out there, because that's rather timeconsuming with big volumes. But thanks anyway. –  poplitea Oct 9 '11 at 2:05
    
Thank you, that's it. Tested, and it works -- at least for me in this test-instance. –  poplitea Oct 9 '11 at 3:13
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.