# FreeNAS Disk Encryption
I store my data on an encrypted freenas server. It was expensive to build, but works well and provides my data over a 10gBit link.
I haven't had to touch the machine in a while, but due to recent chrome updates, modern web browsers no longer work to unlock the encrypted disks.
So with zero research, I hastily decided I wanted to upgrade from 9.1 to 11.3.
I logged in using ie11, changed the train and pressed upgrade from the web interface. It asked me to backup the config, I did so. 5 min later, the upgrade failed. Great.
So I grab a usb and did an upgrade install from a fresh iso. It also fails. I do a fresh install.
This is where mistakes were horribly made.
Without knowing it, this deleted the decryption key to my 24tb raidz1 nas.

The install finishes and I try to mount my encrypted volume. It fails.
No worries, I have a backup of the freenas settings config from the upgrade prompt. I try to restore using that. Of course 11.3 doesn't recognize the database file.
Feverously researching, I discover not only are the settings non transferable, the geli keys don't get backed up when you backup the freenas settings. Fantastic.

Thankfully I have a backup of half my data from a couple years ago stored offsite, so it's not a complete loss.
Do yourself a favor now and go make a backup of your data.
Newegg is selling a [12tB WD Mybook for $199](https://www.newegg.com/black-wd-my-book-12tb/p/N82E16822234404). Just pick that up and encrypt your data using something like [veracrypt](https://www.veracrypt.fr/).

Don't make my mistake.
Before upgrading FreeNas make sure to backup your geli keys from the web interface. The same keys should also live in `/data/geli` if you can't access the web interface.
Now time for me to dig through all my files like a mad man that I am to find if past Mike was smart and made a key backup.
Well, he did when he made the cluster, he's not a complete jerk.
Unfortuately one of the drives in the cluster failed since the intitial install. Did I mention when one drive fails and you replace it, freenas requires you re-key.
The keys I have don't work.
While digging through all my files on all my hard drives to see what I still have, I discovered I made a clonezilla backup of my machine at one point in time. It's from 2 months after the hdd failure. There's a chance.
Clonezilla saves the hdd in this weird format, that I can't figure out how to mount, so I had to restore the 250gb image using clonezilla in a vm.
One of the longest hours of my life.
I boot a ubuntu iso and explore the filesystem to find the most beautiful sight.

Using `geli (2).key` the pool imports and unlocks

Make backups kids.