macadmins / escrow-buddy

A macOS authorization plugin that helps MDM administrators ensure valid FileVault keys are escrowed for all their Macs.
Apache License 2.0
181 stars 9 forks source link

Stuck in a boot loop after macOS Software Update #9

Closed janzablox closed 5 months ago

janzablox commented 5 months ago

Summary

This may be a coincidence, but just wanted to report it in case there was a bug. I deployed Escrow Buddy to a system and it showed up as "Configured" within the Jamf EA (Escrow Buddy authdb status). I restarted with no issue, but noticed when I logged back into the system, it prompted (within System Settings) to update macOS to 13.6.4 from 13.5.1. When trying to install the update, it got stuck in a bootloop. Before even getting to the login screen, it prompts to enter a password for the Disk (looks like a FileVault prompt). Upon entering the password, it restarts and back to the same prompt. I've also tried macOS Recovery, including First Aid and reinstall macOS Ventura, but upon Reinstalling macOS Ventura through Recovery, it gives an error: This operation couldn't be completed: (com.apple.BuildInfo.preflight.error error 21.) - At that point I tried SMC/NVRAM Resets, Safe Mode, and Internet Recovery. I still either get the FileVault Prompt to enter my password, which then bootloops, or the preflight error (when trying to reinstall macOS via Recovery).

Steps to Reproduce

Expected Behavior

No boot loop, and only an escrowed Key.

Environment

Additional Context

I've added some screenshots of the FileVault prompt and preflight error. IMG_4067 IMG_4066

homebysix commented 5 months ago

Hi @janzablox - This doesn't seem like a series of symptoms that Escrow Buddy could be responsible for. However just to be thorough, would you mind running through these steps to remove Escrow Buddy from the authorization database on the affected Mac? If the issues persist after the authdb has been reset to its default, I think it's likely the issue has a different cause.

janzablox commented 5 months ago

Hi @janzablox - This doesn't seem like a series of symptoms that Escrow Buddy could be responsible for. However just to be thorough, would you mind running through these steps to remove Escrow Buddy from the authorization database on the affected Mac?

Which "Disk" should we be selecting to "Mount" the drive? Because most selections only give the option to "Unmount", not "Mount". Screenshot 2024-01-31 at 9 38 40 AM

homebysix commented 5 months ago

It looks like Macintosh HD is already mounted in your screenshot. You should be OK to proceed to steps 4 and 5, where you delete specific files in Terminal from /Volumes/Macintosh HD/var/db.

janzablox commented 5 months ago

I didn't get the desired output within Step 5:

 auth.db
 auth.db-shm
 auth.db-wal

It seems this may be unrelated to Escrow Buddy. I also couldn't reproduce the problem on another machine, so maybe it was a botched macOS upgrade.

Screenshot 2024-01-31 at 2 13 31 PM