Blocked out from reinstalling by system konsole GELI passphrase request

[John Gaskill]

After getting 15.1 installed on my new system, a closer inspection revealed it did not go down as I thought I had specified, so I wiped out the old install and reinstalled with more of what I wanted.

All new AMD/ASUS system with lots of ram, good CPU and SSDs.  Followed instructions through the install menus and set up a ZFSRAID1 file system.

I probably should not have opted for GELI encryption, but did, kept accurate record of input and successful passphrases, etc. and finished installation.

When attempting to reboot into FreeBSD afterwards, the following screen appeared and entering the strong passphrase correctly does not allow me to pass and get further.

I would like to use "gpart destroy -F" to clear the three SSDs of the ZFS systems and FreeBSD installation and reinstall it without the encryption and other hardening options I selected last time around.

Not much out there on this subject from what I can find.

Suggestions please on getting past this screen?

Tried UEFI shell but although I can render a list of devices, I don't seem to be able to mount them.

Yahoo Mail: Search, Organize, Conquer

[Edward Sanford Sutton, III]

On 7/14/26 15:51, John Gaskill wrote:
> After getting 15.1 installed on my new system, a closer inspection
> revealed it did not go down as I thought I had specified, so I wiped out
> the old install and reinstalled with more of what I wanted.
>
> All new AMD/ASUS system with lots of ram, good CPU and SSDs.  Followed
> instructions through the install menus and set up a ZFSRAID1 file system.
>
> I probably should not have opted for GELI encryption, but did, kept
> accurate record of input and successful passphrases, etc. and finished
> installation.
>
> When attempting to reboot into FreeBSD afterwards, the following screen
> appeared and entering the strong passphrase correctly does not allow me
> to pass and get further.

Is it re-prompting for the password after you enter it or is it doing
something else? At 3 failed attempts to get a password to decrypt it
should move on to the next device(/partition?). With layouts using
labels/IDs instead of raw device entries I've had geli prompt across all
detected variations when trying to fail attempts but not sure if the
early boot prompts have that too.

If you made changes such as using a different keyboard layout then you
need to be aware that such layouts are not present when prompted for the
password before the kernel and such is loaded.

> I would like to use "gpart destroy -F" to clear the three SSDs of the
> ZFS systems and FreeBSD installation and reinstall it without the
> encryption and other hardening options I selected last time around.

As long as you can boot your install media, you should be able to use
alt+F# where different #s go to different terminals and some will take
you straight to an interactive prompt. From there you can issue whatever
commands you desire including "camcontrol/nvmecontrol format/sanitize"
or "dd" operations if you want to go further than just changing/erasing
partition data.

Asus usually supports pressing F8 during boot to get a menu of bootable
devices for a one time override or you can temporarily/permanently
change boot device order in the UEFI (both F2 or del should enter if I
remember Asus right). If you have booted other media and still get the
password prompt, entering incorrect values 3 times should have it move
on. A more drastic choice would be disconnecting the disk until bootup
has gone further but UEFI settings and hardware needs to support hot
swapping to connect it after power on. You could also use another OS
version or type that doesn't have GELI support to get past it getting
stuck on a GELI password.

> Not much out there on this subject from what I can find.
>
> Suggestions please on getting past this screen?
>
> Tried UEFI shell but although I can render a list of devices, I don't
> seem to be able to mount them.
>

> Yahoo Mail: Search, Organize, Conquer <https://
> mail.onelink.me/107872968?
> pid=nativeplacement&c=US_Acquisition_YMktg_315_SearchOrgConquer_EmailSignature&af_sub1=Acquisition&af_sub2=US_YMktg&af_sub3=&af_sub4=100002039&af_sub5=C01_Email_Static_&af_ios_store_cpp=0c38e4b0-a27e-40f9-a211-f4e2de32ab91&af_android_url=https://play.google.com/store/apps/details?id=com.yahoo.mobile.client.android.mail&listing=search_organize_conquer>

[Marco Moock]

Am 15.07.26 um 00:51 schrieb John Gaskill:

> When attempting to reboot into FreeBSD afterwards, the following
> screen appeared and entering the strong passphrase correctly does
> not allow me to pass and get further. I would like to use "gpart
> destroy -F" to clear the three SSDs of the ZFS systems and FreeBSD
> installation and reinstall it without the encryption and other
> hardening options I selected last time around. Not much out there on
> this subject from what I can find.

You can boot the install media and go into a console there to delete the
partition table.
Although, that does not wipe the data. If you also need to do that, you
can use dd to write zeros. If the SSD supports secure erase, you can use
that too (I never did in FreeBSD).

--
Gruß
Marco

Junk-Mail bitte an tras...@stinkedores.dorfdsl.de

[John Gaskill]

>> After getting 15.1 installed on my new system, a closer inspection
>> revealed it did not go down as I thought I had specified, so I wiped out
>> the old install and reinstalled with more of what I wanted.
>>
>> All new AMD/ASUS system with lots of ram, good CPU and SSDs.  Followed
> instructions through the install menus and set up a ZFSRAID1 file system.
>>
>> I probably should not have opted for GELI encryption, but did, kept
>> accurate record of input and successful passphrases, etc. and finished
>> installation.
>>
>> When attempting to reboot into FreeBSD afterwards, the following screen
>> appeared and entering the strong passphrase correctly does not allow me
>> to pass and get further.

> Is it re-prompting for the password after you enter it or is it doing
> something else? At 3 failed attempts to get a password to decrypt it

>.should move on to the next device(/partition?). With layouts using

> labels/IDs instead of raw device entries I've had geli prompt across all
> detected variations when trying to fail attempts but not sure if the
> early boot prompts have that too.

After entering the password it returns "Bad password Request" and allows two
more attempts before changing to another device/partition id and
repeating the process.

If I let it wait or doesn't respond quickly enough, it returns to a system on
login screen.

> If you made changes such as using a different keyboard layout then you
> need to be aware that such layouts are not present when prompted for the
> password before the kernel and such is loaded.

>> I would like to use "gpart destroy -F" to clear the three SSDs of the
>> ZFS systems and FreeBSD installation and reinstall it without the
>> encryption and other hardening options I selected last time around.

> As long as you can boot your install media, you should be able to use
> alt+F# where different #s go to different terminals and some will take
> you straight to an interactive prompt. From there you can issue whatever
> commands you desire including "camcontrol/nvmecontrol format/sanitize"
> or "dd" operations if you want to go further than just changing/erasing
> partition data.

That is the problem. I am unable to boot the install media.
Normally it would boot by itself after signing in with the install media USB drive
in place.

Thanks for the suggestions. I will attempt and get back to the list.