Copied vBox full folder from one SSD drive to another lost encryption

This is for discussing general topics about how to use VirtualBox.
Post Reply
arti_petrosyan
Posts: 5
Joined: 5. Aug 2022, 10:27

Copied vBox full folder from one SSD drive to another lost encryption

Post by arti_petrosyan »

Hi all,

Copied vBox full folder from one SSD drive to another. Updated my Virtual Box to the latest version, opened up the .vbox file and the virtual machine will not boot.
The Disk Encryption tab is inactive.

Opening up the .vbox from old drive again don't have disk encryption type active and again is not booting. Don't know what to do...

I know that I have to copy the virtual machine fully from one location to the other and it worked before this time something is wrong.
Could you please help recover the Virtual Machine?

Thanks.
mpack
Site Moderator
Posts: 39156
Joined: 4. Sep 2008, 17:09
Primary OS: MS Windows 10
VBox Version: PUEL
Guest OSses: Mostly XP

Re: Copied vBox full folder from one SSD drive to another lost encryption

Post by mpack »

Please provide a VM log file. Make sure the VM is fully shut down, then right click it in the manager UI. Select "Show Log" and save "VBox.log" (no other file) to a zip file. Attach the zip here.
arti_petrosyan
Posts: 5
Joined: 5. Aug 2022, 10:27

Re: Copied vBox full folder from one SSD drive to another lost encryption

Post by arti_petrosyan »

Attached the log file. Thanks
Attachments
win10-2022-08-04-23-35-07.zip
(31.23 KiB) Downloaded 2 times
mpack
Site Moderator
Posts: 39156
Joined: 4. Sep 2008, 17:09
Primary OS: MS Windows 10
VBox Version: PUEL
Guest OSses: Mostly XP

Re: Copied vBox full folder from one SSD drive to another lost encryption

Post by mpack »

As I suspected, you have separated the locations of the .vbox and .vdi files, so you have NOT treated the VM folder as an indivisible unit when moving. This makes it highly likely to me that you have mismatched the .vbox and .vdi files.

If you zip and post the .vbox file we can at least see if it contains an encoded DEK, although there's no guarantee that it's the right one. I'd also want to check that you haven't orphaned any snapshots when the two locations were split.
arti_petrosyan
Posts: 5
Joined: 5. Aug 2022, 10:27

Re: Copied vBox full folder from one SSD drive to another lost encryption

Post by arti_petrosyan »

Attached the .vbox
I did not open any snapshots.

If it it unrecoverable it is too sad for me :( . Just getting some files out of it would be great. I tried viewing the .vdi files using the PowerISO application in case of ubuntu vdi I could see the files but in case of windows I wasnt able to. Just dont remember if I had encrypted the Ubuntu machine. Maybe it is not encrypted therefor I can view the files.

Thank you
Attachments
win10.zip
(2.12 KiB) Downloaded 3 times
mpack
Site Moderator
Posts: 39156
Joined: 4. Sep 2008, 17:09
Primary OS: MS Windows 10
VBox Version: PUEL
Guest OSses: Mostly XP

Re: Copied vBox full folder from one SSD drive to another lost encryption

Post by mpack »

Not only does the provided .vbox file not contain any encoded DEKs (Data Encryption Keys), it doesn't even register any hard disks. This implies that you have been sharing hard disks between VMs, which is a dangerous thing to do even when encryption is not involved.

To stand a chance of recovering the data you need to find the VM that registers the hard disk. Here is what a normal (not encrypted) hard disk registry entry looks like inside the .vbox file:

Code: Select all

   <HardDisks>
        <HardDisk uuid="{c311ef58-56b2-435d-ba48-73958929f1b2}" location="XP Pro SP3 Raw.vdi" format="VDI" type="Normal"/>
   </HardDisks>
And here is what one looks like when it includes a 256bit DEK encoded using a password:

Code: Select all

        <HardDisk uuid="{5cd555d6-f1e7-425c-8c13-969b982f4dee}" location="XP Pro Encryption Test.vdi" format="VDI" type="Normal">
          <Property name="CRYPT/KeyId" value="XP Pro Encryption Test"/>
          <Property name="CRYPT/KeyStore" value="U0NORQABQUVTLVhUUzI1Ni1QTEFJTjY0AAAAAAAAAAAAAAAAAABQQktERjItU0hB
MjU2AAAAAAAAAAAAAAAAAAAAAAAAAEAAAAA/G9CibrS8prVjFfTv5BSRIKqBxf66
7UPUauaBXD/P0CAAAADNjRS/f1fo53ND2VtWepzWXl985xDCZhznRnxNJQ77UiBO
AADJIP+uzzf3c33475X5/+DrMN3WChRm2JP75CrZvHUBsyAwBQBAAAAAsjwEVf3Q
MyxJoFDfCA6P74gqxGe2IsZ20NCKXhj68B8j4htyuZdqQ9tN7+j0herz+NfJhq7R
2HvxnO7Li1AJNQ=="/>
        </HardDisk>
      </HardDisks>
Something like that is what you need to find.
arti_petrosyan
Posts: 5
Joined: 5. Aug 2022, 10:27

Re: Copied vBox full folder from one SSD drive to another lost encryption

Post by arti_petrosyan »

Thank you will try to look for it.
arti_petrosyan
Posts: 5
Joined: 5. Aug 2022, 10:27

Re: Copied vBox full folder from one SSD drive to another lost encryption

Post by arti_petrosyan »

No sadly I have overridden the original .vbox no older version available.

Anyways thank you for your help.
Post Reply