820-00850 - T2 Corrupted / SSD Issue?

mccafe

Member
I have an 820-00850 with no sign of liquid damage for data recovery. The customer is unable to login to his user and says he is 100% certain he is using the correct password. When trying to use the Reset Password feature, after a few seconds of the "examining volumes" screen, we are presented an empty list of users to choose from. I am unable to open up Disk Utility or terminal to find out more about this computer. Secure boot is enabled so essentially this computer is bricked at this point whether or not he wants the data, but in this case he does. Customer brought it to Apple and they said the motherboard had to be replaced and data would be lost.

Any advice on where I should begin?
 

2informaticos

Administrator
Staff member
If Target Disk mode is not possible, you can try DFU revive, just in case.
Be aware, revive, not restore.
 

mccafe

Member
Working on this MacBook again and target disk mode did not work with full security, but after numerous tries of getting into recovery, I was able to get in with terminal access, etc. I am not too sure why it was not working before.

Looks like it is a corrupted partition. I found that the Macintosh HD - APFS partition has an encryption error which now makes sense why customer is able to boot to login screen and see username, but unable to login with correct password. I am in the process of cloning the SSD in case of any issues, but any ideas on the "Ecrypted: ERROR -69808" for disk2s1? Must fix in order to decrypt and recover data.

I realize this is not component level repair help, but hopefully I can get some advice.

Bash:
-bash-3.2# ls
.forward    Library
-bash-3.2# diskutil apfs list
APFS Container (1 found)
|
+-- Container disk2 6B2D2622-3808-45C3-8392-6D85FCB0F767
    ====================================================
    APFS Container Reference:     disk2
    Size (Capacity Ceiling):      250685575168 B (250.7 GB)
    Capacity In Use By Volumes:   38388994048 B (38.4 GB) (15.3% used)
    Capacity Not Allocated:       212296581120 B (212.3 GB) (84.7% free)
    |
    +-< Physical Store disk0s2 9467321E-7A3D-42F9-B818-3A635815E1BA
    |   -----------------------------------------------------------
    |   APFS Physical Store Disk:   disk0s2
    |   Size:                       250685575168 B (250.7 GB)
    |
    +-> Volume disk2s1 243CEC26-CB1F-47F2-B906-7D73B06E9B0F
    |   ---------------------------------------------------
    |   APFS Volume Disk (Role):   disk2s1 (No specific role)
    |   Name:                      Macintosh HD (Case-insensitive)
    |   Mount Point:               Not Mounted
    |   Capacity Consumed:         35547934720 B (35.5 GB)
    |   Encrypted:                 ERROR -69808
    |
    +-> Volume disk2s2 8AA98121-CA98-458A-ABF2-40BC131323A3
    |   ---------------------------------------------------
    |   APFS Volume Disk (Role):   disk2s2 (Preboot)
    |   Name:                      Preboot (Case-insensitive)
    |   Mount Point:               Not Mounted
    |   Capacity Consumed:         44425216 B (44.4 MB)
    |   FileVault:                 No
    |
    +-> Volume disk2s3 18177DCD-09DF-4396-8198-A5D2658D9D28
    |   ---------------------------------------------------
    |   APFS Volume Disk (Role):   disk2s3 (Recovery)
    |   Name:                      Recovery (Case-insensitive)
    |   Mount Point:               Not Mounted
    |   Capacity Consumed:         510595072 B (510.6 MB)
    |   FileVault:                 No
    |
    +-> Volume disk2s4 BE867448-F329-4D75-A97A-FDEF4BF3BBFE
        ---------------------------------------------------
        APFS Volume Disk (Role):   disk2s4 (VM)
        Name:                      VM (Case-insensitive)
        Mount Point:               Not Mounted
        Capacity Consumed:         2147659776 B (2.1 GB)
        FileVault:                 No (Encrypted at rest)
-bash-3.2# diskutil decryptVolume /dev/disk2s1
diskutil: did not recognize verb "decryptVolume"; type "diskutil" for a list
-bash-3.2# diskutil apfs decryptVolume /dev/disk2s1
Passphrase for existing "Disk" user 243CEC26-CB1F-47F2-B906-7D73B06E9B0F:
Starting background decryption of disk2s1 using the "Disk" crypto user as authorization
Error starting background decryption of APFS Volume: Some information was unavailable during an internal lookup (-69808)
-bash-3.2#
 

mccafe

Member
This is what I see. Looks like one legitimate entry:

Bash:
-bash-3.2# xartutil --list
Total Session count: 2

Entry: 0
UUID: 00000000-0000-0000-0000-000000000000 ; Session seeds: 3

Entry: 1
UUID: 243CEC26-CB1F-47F2-B906-7D73B06E9B0F ; Session seeds: 2

-bash-3.2#
 

piernov

Moderator
Staff member
Not the exact same issue then, but I don't know where to go from there unfortunately…
 
Top