# FreeNAS Disk Encryption I store my data on an encrypted freenas server. It was expensive to build, but works well and provides my data over a 10gBit link. I haven't had to touch the machine in a while, but due to recent chrome updates, modern web browsers no longer work to unlock the encrypted disks. So with zero research, I hastily decided I wanted to upgrade from 9.1 to 11.3. I logged in using ie11, changed the train and pressed upgrade from the web interface. It asked me to backup the config, I did so. 5 min later, the upgrade failed. Great. So I grab a usb and did an upgrade install from a fresh iso. It also fails. I do a fresh install. This is where mistakes were horribly made. Without knowing it, this deleted the decryption key to my 24tb raidz1 nas. ![](images/freenasgeli/thisisfine.jpg) The install finishes and I try to mount my encrypted volume. It fails. No worries, I have a backup of the freenas settings config from the upgrade prompt. I try to restore using that. Of course 11.3 doesn't recognize the database file. Feverously researching, I discover not only are the settings non transferable, the geli keys don't get backed up when you backup the freenas settings. Fantastic. ![](images/freenasgeli/sweating.gif) Thankfully I have a backup of half my data from a couple years ago stored offsite, so it's not a complete loss. Do yourself a favor now and go make a backup of your data. Newegg is selling a [12tB WD Mybook for $199](https://www.newegg.com/black-wd-my-book-12tb/p/N82E16822234404). Just pick that up and encrypt your data using something like [veracrypt](https://www.veracrypt.fr/). ![](images/freenasgeli/hdd.png) Don't make my mistake. Before upgrading FreeNas make sure to backup your geli keys from the web interface. The same keys should also live in `/data/geli` if you can't access the web interface. Now time for me to dig through all my files like a mad man that I am to find if past Mike was smart and made a key backup. Well, he did when he made the cluster, he's not a complete jerk. Unfortuately one of the drives in the cluster failed since the intitial install. Did I mention when one drive fails and you replace it, freenas requires you re-key. The keys I have don't work. While digging through all my files on all my hard drives to see what I still have, I discovered I made a clonezilla backup of my machine at one point in time. It's from 2 months after the hdd failure. There's a chance. Clonezilla saves the hdd in this weird format, that I can't figure out how to mount, so I had to restore the 250gb image using clonezilla in a vm. One of the longest hours of my life. I boot a ubuntu iso and explore the filesystem to find the most beautiful sight. ![](images/freenasgeli/keys.png) Using `geli (2).key` the pool imports and unlocks ![](images/freenasgeli/pools.png) Make backups kids.