FileVault and Sierra guide for noobs like me

Discussion in 'General Help' started by Overkill303, May 7, 2017.

  1. Overkill303

    Overkill303

    Joined:
    Mar 6, 2016
    Messages:
    76
    Mobo:
    Asus Maximus VIII Gene
    CPU:
    Intel 6700K
    Graphics:
    EVGA GTX 1070 FTW
    Mobile Phone:
    iOS
    May 7, 2017 at 8:13 PM #1
    Overkill303

    Overkill303

    Joined:
    Mar 6, 2016
    Messages:
    76
    Mobo:
    Asus Maximus VIII Gene
    CPU:
    Intel 6700K
    Graphics:
    EVGA GTX 1070 FTW
    Mobile Phone:
    iOS
    Hi! This is actually quite simple to set up but requires a lot of knowledge that a fresh hackintosh builder like me did not have. Like a lot of hackintosh knowledge, once you know it its too obvious to state but if you don't know it, its blocking. I want to pass along what I've learned before it becomes so blindingly obvious to me that I assume everyone else knows it too :D As such, this post has a lot of extra info in it. If you just want the quick and dirty steps, scroll to the end.

    The source of this solution is this thread:

    http://www.insanelymac.com/forum/topic/317290-filevault-2/?hl=+clover++encryption

    However, it seems like a thread of developers, is technical, assumes a lot of knowledge, and doesn't seem to have much patience for non developers. With a little help from mineralwasser I figured out enough to get it working.

    Background info

    First, it's critical to have a clone of your system drive and a way to easily wipe the system disk, lay down new partitions, and restore from the clone. I won't digress into what happened when I found out the hard way that I couldn't run SuperDuper! from the Unibeast install USB. Lets just say that right now I have an external ssd with a bootable 16GB macOS partition called Rescue, and the remainder of the ssd contains an encrypted partition with a daily SuperDuper! clone of my MacOS system partition on it. Rescue now also contains a dmg of a working Recovery HD partition too. More on that part later.

    My Recovery HD partition had never worked, and I kept reading about people saying that with FileVault turned on, we had to boot from the Recovery HD partition. At this point I had no idea why the Recovery HD partition would have anything to do with FileVault, but I figured I should fix it. If you search this site and google there are a lot of ways to fix the recovery partition or create a new one, however the hackintosh info I found mostly had to do with scripts that didn't work in Sierra or extremely complicated processes. Then I found this post:

    https://www.tonymacx86.com/threads/recovery-hd-partition-with-el-capitan.181701/

    Bam. 5 minutes, working Recovery HD partition. Props to jimmyfoz.

    It is worth noting here that I had to learn about command line diskutil because Disk Utility doesn't support showing hidden partitions like the APPLE_BOOT type. Apparently there used to be a debug menu that you could turn on but its gone in Sierra. diskutil is the only way that you can view and work with hidden partitions like EFI and Recovery HD. I suspect that EFI Mounter and Clover Configurator just call diskutil for EFI mounting.

    At mineralwasser's suggestion for shits and giggles I updated my clover using clover configurator to 4061 and just enabled FileVault to see if the necessary files were part of Clover. They weren't. (In hindsight probably because you have to manually choose a driver for your keyboard type). I figured hey, I've got a clone, easy peasy :) Anyway, fast forward to me using my new Rescue drive to restore the clone back to my MacOS partition. At this point I learned that if you use Disk Utility to erase your system macOS partition, IT AUTOMATICALLY REMOVES THE RECOVERY HD PARTITION TOO! So I actually had to drop down a whole new unibeast / multibeast install to get the Recovery HD partition created, then I had to repair it again. This is why I recommend backing up your Recovery HD partition to a disk image. I learned how to do it here:

    https://www.lifewire.com/create-os-x-recovery-hd-on-any-drive-2260909

    In a nutshell you need to use diskutil list to find the identifier of your Recovery HD partition (diskXsX), then use this command:

    sudo hdiutil create ~/Desktop/Recovery\ HD.dmg -srcdevice /dev/diskXsX

    to make the image. I haven't tested this part but in theory now if I need to restore my system from a clone I can restore the Recovery HD partition too since it matters now.

    So now I have a working system and a working recovery partition. Time to try this out for reals.

    The Actual Fix

    The problem that the whole insanelymac thread solves is that you will need to type in a password while booting from the Recovery HD and your regular keyboard driver won’t work in this circumstance. So you need to install one of two keyboard drivers. Details on which one to pick are in the thread but the oversimplification is that wired usb keyboards use one driver and the apple bluetooth keyboards use a different one. Both are linked in the first post of the thread. Only install the driver that you need. I picked the one called AptioInputFix since I'm using a wireless apple keyboard and mouse hooked up to a native Broadcom pci card from osxwifi.

    I downloaded the driver, which, confusingly enough, was called AsAmiShimBinaries, not AptioInputFix as everyone talks about in that thread. As it turns out its the same thing and the name doesn’t matter. I grabbed the non debug version and copied it to the /EFI/CLOVER/drivers64UEFI folder of the EFI partition on the drive containing my MacOS partition.

    Next I went to Security & Privacy in System Preferences and turned on FileVault. Following the prompts, I set and recorded my recovery key, allowed each user account access to the encrypted drive, and let the system reboot.

    Another big unknown for me was what the Recovery HD had to do with Filevault. I don’t really know how or why this worked but it turned out to be magic. Upon reboot, Clover already had the recovery hd partition selected, so I chose it. Previously, booting into the recovery partition would bring me into a ui that was very similar to the unibeast installer ui. Now, magically, it brought me to a login screen showing the user accounts of my MacOS partition. Crossing my fingers that my keyboard worked, I logged in and was taken to my desktop. I just wanted to officially state that no one talks about this step because it magically just works, so don’t spend time worrying about what it means. And because its magic, I'm going to make a disk image of this version of the Recovery HD and put it on my Rescue drive too. You know, since I don't *actually* understand whats going on here :D

    One final note: after the reboot your drive will still be encrypting for a little bit, you can see the progress in System Preferences -> Security & Privacy. I read somewhere that if you want to change your encryption password, WAIT TILL THE DRIVE IS DONE ENCRYPTING BEFORE YOU DO IT!

    Quick and Dirty List of Steps
    1. Have Clover updated to at least r3877. I used r4061 which was the latest version at this time.
    2. Have a working Recovery HD partition.
    3. Download a keyboard driver from the first post here. I used AptioInputFix since I use an apple wireless keyboard / trackpad and a native Broadcom card. If you use a wired keyboard you might need the other driver. Copy the appropriate driver to /EFI/CLOVER/drivers64UEFI on the boot drive's EFI partition.
    4. Turn on FileVault. Follow the various prompts
    5. Allow the system to reboot and choose the Recovery HD partition in Clover. Type in your password when requested. (This is the part that needed the fix from insanelymac).
    6. Observe your FileVault enabled hackintosh and profit.

    I hope this helps some folks out! Feel free to ask the other noob questions like how do you update clover, etc. I had to figure that out too :)
     
    EricTheRed and pastrychef like this.
    Last edited: May 7, 2017
  2. AntaresFR

    AntaresFR

    Joined:
    May 11, 2017
    Messages:
    4
    Mobo:
    Asus Z170i Pro Gamin
    CPU:
    Intel i7 6700
    Graphics:
    EVGA Geforce 1070 GTX
    Mac:
    iMac
    May 13, 2017 at 10:32 PM #2
    AntaresFR

    AntaresFR

    Joined:
    May 11, 2017
    Messages:
    4
    Mobo:
    Asus Z170i Pro Gamin
    CPU:
    Intel i7 6700
    Graphics:
    EVGA Geforce 1070 GTX
    Mac:
    iMac
    Thanks for the tip!
    I did it and it works ... almost ...
    When I input my password, the input field shakes and it doesn't work. I have to clic on the "?" then clic on the arrow to put my recovery key to reset my password. Then I can access to Sierra. I don't understand why my password doesn't work. I try to type it in the recovery input to be sure it's correct, and it is.

    Edit : I'm able to unlock it in recovery mode with same password :D But not able to unlock it normally with the pass...weird
     
    Overkill303 likes this.
    Last edited: May 14, 2017
  3. Overkill303

    Overkill303

    Joined:
    Mar 6, 2016
    Messages:
    76
    Mobo:
    Asus Maximus VIII Gene
    CPU:
    Intel 6700K
    Graphics:
    EVGA GTX 1070 FTW
    Mobile Phone:
    iOS
    May 14, 2017 at 9:49 PM #3
    Overkill303

    Overkill303

    Joined:
    Mar 6, 2016
    Messages:
    76
    Mobo:
    Asus Maximus VIII Gene
    CPU:
    Intel 6700K
    Graphics:
    EVGA GTX 1070 FTW
    Mobile Phone:
    iOS
    Which keyboard driver did you choose? and what sort of keyboard / bluetooth are you running? In the original InsanelyMac thread there are a few hints of keyboard bugs. In the first post they talk about a few key combinations not quite working, and I saw a possibility of the number pad num lock not quite working if you are using that for password entry.

    Check out post #60 in that thread:

    "With UsbKbDxe, login is possible with a password with mixed upper- and lower-case characters and special characters (German/QWERTZ keymap). Issues are that 1) the keyboard must be plugged in during login and 2) the system freezes during startup very often (like described by vit9696 in first post).

    With vit9696's AptioInputFix driver, the keyboard kind of works (repeated keys are lost, cmd+a etc don't work), but every password I enter is considered to be incorrect. I've tried changing the password to an all lower-case one without potentially remapped characters (such as z and y). No luck with the simple password. Logging in using the recovery key works with AptioInputFix - odd!"

    The following posts addressing that person's issue with all his passwords being rejected. Perhaps it can help your issue too. Post #63 contains a driver called AptioInputFixB2-NoPointer.efi.zip. The person who helped me get going needed to use that one.

    The other thing that I can think of is during FileVault setup did you enter the passwords of each user account that you wanted to grant access to?


    g
     
  4. AntaresFR

    AntaresFR

    Joined:
    May 11, 2017
    Messages:
    4
    Mobo:
    Asus Z170i Pro Gamin
    CPU:
    Intel i7 6700
    Graphics:
    EVGA Geforce 1070 GTX
    Mac:
    iMac
    May 27, 2017 at 8:49 AM #4
    AntaresFR

    AntaresFR

    Joined:
    May 11, 2017
    Messages:
    4
    Mobo:
    Asus Z170i Pro Gamin
    CPU:
    Intel i7 6700
    Graphics:
    EVGA Geforce 1070 GTX
    Mac:
    iMac
    It finally works after some updates of my user account. Weird. But it works.
     
    Overkill303 likes this.
  5. Steve28

    Steve28

    Joined:
    Apr 30, 2017
    Messages:
    51
    Mobo:
    GA-H110N Rev 1.0 BIOS F20
    CPU:
    Intel Core i3-6100
    Graphics:
    Zotac NVIDIA GT 710 2MB
    Mac:
    MacBook Pro, Mac mini
    Mobile Phone:
    iOS
    May 29, 2017 at 6:53 PM #5
    Steve28

    Steve28

    Joined:
    Apr 30, 2017
    Messages:
    51
    Mobo:
    GA-H110N Rev 1.0 BIOS F20
    CPU:
    Intel Core i3-6100
    Graphics:
    Zotac NVIDIA GT 710 2MB
    Mac:
    MacBook Pro, Mac mini
    Mobile Phone:
    iOS
    Almost ready to jump in here... I have a GA-H110N mobo and am using the Apple USB keyboard and have a working recovery partition.

    From what I think I understand.. I simply need to drop the UsbKbDxi.efi file into /EFI/Clover/drivers64UEFI and then I should be good to go to turn on FV?
     
  6. Overkill303

    Overkill303

    Joined:
    Mar 6, 2016
    Messages:
    76
    Mobo:
    Asus Maximus VIII Gene
    CPU:
    Intel 6700K
    Graphics:
    EVGA GTX 1070 FTW
    Mobile Phone:
    iOS
    May 30, 2017 at 5:36 PM #6
    Overkill303

    Overkill303

    Joined:
    Mar 6, 2016
    Messages:
    76
    Mobo:
    Asus Maximus VIII Gene
    CPU:
    Intel 6700K
    Graphics:
    EVGA GTX 1070 FTW
    Mobile Phone:
    iOS
    Yes, thats my understanding. I used the other keyboard drive so I haven't tested the USB keyboards.

    The method of failure will be rebooting, being prompted to enter your password, and being unable to. At that point I just restored my drive from a clone, but there is also a way to use the terminal to turn off disk encryption, effectively putting you back where you were before.

    Please report on your experiences as I've only used the other keyboard driver.
     
  7. RobertSweden

    RobertSweden

    Joined:
    Jun 6, 2017
    Messages:
    3
    Mobo:
    Gigabyte GA-Z87X-D3H
    CPU:
    Intel i7 4770k
    Graphics:
    XFX Radeon R9 280X
    Mobile Phone:
    Android
    Jun 9, 2017 at 3:05 PM #7
    RobertSweden

    RobertSweden

    Joined:
    Jun 6, 2017
    Messages:
    3
    Mobo:
    Gigabyte GA-Z87X-D3H
    CPU:
    Intel i7 4770k
    Graphics:
    XFX Radeon R9 280X
    Mobile Phone:
    Android
    Hi everybody. I followed the guide and got filevault to work.

    Unfortunately when I boot with the created recovery partition my AMD grapichs card wont be recognized and results in a failed boot. Everything works fine when I activate my Intel graphics card.

    This is my first "hackintosh" installation so my knowledge of how MacOs work is basically zero, so any help would be much appreciated.
     
  8. BreBo

    BreBo Moderator

    Joined:
    Oct 17, 2011
    Messages:
    5,037
    Mobo:
    Gigabyte GA-Z87X-OC
    CPU:
    Intel Core i7-4770K
    Graphics:
    Asus Strix GTX 970
    Jun 9, 2017 at 3:07 PM #8
    BreBo

    BreBo Moderator

    Joined:
    Oct 17, 2011
    Messages:
    5,037
    Mobo:
    Gigabyte GA-Z87X-OC
    CPU:
    Intel Core i7-4770K
    Graphics:
    Asus Strix GTX 970
    @RobertSweden, please update your profile (personal details) with your Motherboard or Make/Model, CPU and Graphics Card.
     
  9. RobertSweden

    RobertSweden

    Joined:
    Jun 6, 2017
    Messages:
    3
    Mobo:
    Gigabyte GA-Z87X-D3H
    CPU:
    Intel i7 4770k
    Graphics:
    XFX Radeon R9 280X
    Mobile Phone:
    Android
    Jun 9, 2017 at 6:07 PM #9
    RobertSweden

    RobertSweden

    Joined:
    Jun 6, 2017
    Messages:
    3
    Mobo:
    Gigabyte GA-Z87X-D3H
    CPU:
    Intel i7 4770k
    Graphics:
    XFX Radeon R9 280X
    Mobile Phone:
    Android
    Sorry about that, as I said I am a totally new in this area. I've updated my profile with the hardware I am using.
     
  10. CyCLoBoT

    CyCLoBoT

    Joined:
    Sep 19, 2010
    Messages:
    315
    Mobo:
    Asus H97M-Plus
    CPU:
    Intel i7 4790K
    Graphics:
    Nvidia GeForce GTX 960
    Mac:
    iMac
    Mobile Phone:
    iOS
    Jun 10, 2017 at 6:44 AM #10
    CyCLoBoT

    CyCLoBoT

    Joined:
    Sep 19, 2010
    Messages:
    315
    Mobo:
    Asus H97M-Plus
    CPU:
    Intel i7 4790K
    Graphics:
    Nvidia GeForce GTX 960
    Mac:
    iMac
    Mobile Phone:
    iOS
    What keyboard driver works best with Apple USB keyboard? I'm a little comfused about the keyboard step.
     

Share This Page