If system has only ever had one LUKS device, go to next step The first column is the map filename ( ) without the /dev/mapper/ prefixįind desired open map in above output and make note of its name ( ) This command will only show open maps to LUKS-encrypted devices dmsetup ls -target cryptĮxample: # dmsetup ls -target crypt Instead, the disk itself will need to be closed and moved to a RHEL 6 or RHEL 7 machine. (RHEL 5 caveat: root can extract the master key to a file however, cryptsetup in RHEL 5 doesn't support reading the master key to add a new key. If the system is still up and the device is currently opened (unlocked), root can use the master key to add a new key See: How to add a passphrase, key, or keyfile to an existing LUKS device If so, that other passphrase/keyfile could be used to add a new key If more than one key slot is enabled, perhaps someone else has a valid key. Use the device name from the previous step cryptsetup luksDump /dev/ | grep Key.SlotĮxample: # cryptsetup luksDump /dev/vdb1 | grep Key.Slot Inspect the LUKS header to see how many key-slots are populated

This command will only show LUKS devices blkid -t TYPE=crypto_LUKS -o deviceĮxample: # blkid -t TYPE=crypto_LUKS -o device LUKS allows for up to 8 keys (derived from passphrases or files) per device (A) Are any other passphrases or keyfiles available? It is not possible to recover the master key of LUKS2 devices because the key is stored in the kernel directly. This solution only works with LUKS1 devices. How can I recover my data if forgot luks password ?.I forgot the passphrase to my LUKS-encrypted drive.

Key root master