- Password Changes and FileVault 2
- The Guest User and FileVault 2
- Enabling Admin Users for FileVault 2 via System Preferences
- Creating an Institutional Recovery Key
- Erasing a FileVault 2?Encrypted Volume from the Command Line
- Setting a Text-Only Login Banner from the Command Line for the FileVault 2 Pre-Boot Login Screen
- Booting into Single-User Mode on a FileVault 2?Encrypted Mac
- Using Apple's Internet Recovery to Unlock or Decrypt a FileVault 2?Encrypted Boot Drive
- FileVault 2 and UUIDs
- Automating fdesetup authrestart in 10.9.x or Later
- Conclusion
Erasing a FileVault 2–Encrypted Volume from the Command Line
On occasion, it's necessary to erase a FileVault 2–encrypted volume. However, sometimes Disk Utility won't let you erase or repartition an encrypted drive until you unlock or decrypt. This can be an issue for a malfunctioning FileVault 2–encrypted volume that won't let you either unlock or decrypt.
To help with this issue, the diskutil tool provides a way to delete CoreStorage volumes from the command line, including the ability to erase encrypted CoreStorage volumes (also known as FileVault 2–encrypted volumes) without first deleting them.
Begin by running the following command in the Terminal:
diskutil cs list
The result is a list of the CoreStorage volumes on your system. Unless you have a fusion drive or multiple encrypted drives, your FileVault 2–encrypted drive should be the only one listed.
In the listing, select and copy the Logical Volume Group (LVG) alphanumeric UUID for your CoreStorage volume. The LVG should be the first UUID listed, and it's the one we want to delete (see Figure 24).
Figure 24 Using diskutil cs list to find the Logical Volume Group UUID.
Next, run the following command in the Terminal:
diskutil cs delete UUID_here
This command deletes the encrypted CoreStorage volume and reformats it as an unencrypted HFS+ volume (see Figure 25).
Figure 25 Using diskutil cs delete to erase the encrypted drive.