Indianapolis computer service indiana it service and network support         L5 Solutions - Blog      // We make IT easy

    indianapolis computer service



SOLVED – Mac won’t boot after Lion combo update on PGP with WDE

Feb 7th, 2012 | Posted by | Filed under Indianapolis IT support

Anyone who recently updated their Mac with the 10.7.3 Combo or Delta update may no longer be able to boot their systems if they have Symantec PGP and specifically WDE, whole disk encryption, installed and running.  This is a familiar issue between Apple updates and OsX upgrades and PGP.  Because of the history of those issues we can easily glean the required steps to access our encrypted disk and repair the change from the patch.

 

During boot we normally see the spinning circle and the Apple logo.  But after some time if your Apple logo changes to the circle with a slash through it that indicates the boot drive is not loading.  Booting in safe mode using the Shift key at boot did not progress any farther than a normal boot.  I tried the single user mode (Command S) and verbose boot mode (Command V) and could see the boot uid and the message Still waiting for root device.

 

The solution

After some research and testing I verified that I was able to repair my OS X 10.7.3 Lion with PGP 10.1.2 WDE using the steps from the older Symantec support forum documentation: http://www.symantec.com/business/support/index?page=content&id=TECH149998

These steps are pulled directly from the document above:

Procedure:

1. Boot the system using the PGP Recovery CD.

2. When prompted, authenticate with your passphrase. DO NOT press D to decrypt. Press any key (e.g. spacebar) to boot into Mac OS X normally.

3. Once logged into Mac OS X, PGP Desktop will automatically fix the boot issue and you should no longer need the recovery CD.

4. Download the script “PGPwdeEFIUpdate.tar” to your desktop.

5. Open Terminal and navigate to your desktop directory by typing “cd ~/Desktop” and pressing enter.

6. Type in the command “tar -xzpf PGPwdeEFIUpdate.tgz”

7. Type in the command “chmod 755 PGPwdeEFIUpdate.sh” and press enter.

8. Type in the command “sudo ./PGPwdeEFIUpdate.sh” and press enter.

 

 

** The main point I want to note above is that you do not need to decrypt your drive.

 

The first step requires the PGP recover CD, which I downloaded here: http://www.symantec.com/business/support/index?page=content&id=TECH152610.  Since we are not actually decrypting the drive the version is not as important but you do want to try to get the same pgpboot iso disk image as your installed pgp version.   Once the file is downloaded you need to burn the disk image to a CD and boot your Mac from the CD.  To boot from the CD/DVD press C after the boot tone.  More Mac Intel based boot and startup shortcuts here: http://support.apple.com/kb/HT1533. Again, this is important, when you see the prompt to either decrypt the drive or continue press Return (or any key) to continue per the prompt message.  You many then enter your normal pgp password and proceed to boot as normal.

 

Now you are at the point of the first Symantec support document listed above at step 4.  Another point to note is that in step 6 if you cannot run tar you may use any of the built-in or free programs to extract the files after you download PGPwdeEFIUpdate.tgz.  Stuffit has a free expander program or use the built-in expander.

 

This procedure quickly restored my ability to boot my MacBook Pro with OsX 10.7.3 Lion with PGP WDE.  I hope it helps you get your Mac back up and running and booting as before.

 

As an aside, if you are using File Vault, FV, and needed to mount the encrypted disk for another reason you may simply boot to recovery mode using Command-R, run the disk utility, mount the desired disk and enter your password there.

 

FacebookTwitterLinkedInShare
No comments yet.
You must be logged in to post a comment.