Recover data from encrypted file systems

1 hour
  • 2 Learning Objectives

About this Hands-on Lab

In this exercise, you will recover an encrypted LUKS partition by using a backup LUKS header file.

Learning Objectives

Successfully complete this lab by achieving the following learning objectives:

Unlock the encrypted device.

Review the contents of /etc/crypttab:

cat /etc/crypttab

Check the mounts with lsbkl :

lsblk

Review the contents of /etc/fstab:

cat /etc/fstab

Attempt to mount /luks:

mount /luks

Look for the unlocked device in /dev/mapper:

ll /dev/mapper

Attempt to open manually:

cryptsetup luksOpen /dev/mapper/vg_1-lv_1 luks-vg_1-lv_1 --key-file /root/passphrase.key

View the key slots:

cryptsetup luksDump /dev/mapper/vg_1-lv_1

No key slots are in use. Locate the header backup in /root/:

ll /root/

Restore header file:

cryptsetup luksHeaderRestore /dev/mapper/vg_1-lv_1 --header-backup-file /root/vg_1-lv_1.header

Type uppercase YES.

Attempt to open manually again (using same key and name as /etc/crypttab:

cryptsetup luksOpen /dev/mapper/vg_1-lv_1 luks-vg_1-lv_1 --key-file /root/passphrase.key

Verify unlocked device:

ll /dev/mapper
Mount the encrypted device.

Mount the unlocked device:

mount /luks/

View the files on the device:

ll /luks/

Additional Resources

Users have lost access to an encrypted volume after a disgruntled employee made changes to it. The issue has been escalated to you for resolution.

In the system documentation, it states a backup of the LUKS header exists at /root/vg_1-lv_1.header.

What are Hands-on Labs

Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.

Get Started
Who’s going to be learning?

How many seats do you need?

  • $499 USD per seat per year
  • Billed Annually
  • Renews in 12 months

Ready to accelerate learning?

For over 25 licenses, a member of our sales team will walk you through a custom tailored solution for your business.


$2,495.00

Checkout
Sign In
Welcome Back!
Thanks for reaching out!

You’ll hear from us shortly. In the meantime, why not check out what our customers have to say about ACG?