Tahoe mistakes internal SSD APFS volume as encrypted and will not mount

I have a M2 Mac mini (2023) with Sequoia 15.7 installed on the internal SSD and Tahoe 26.0 installed on an external SSD.

Initially, when I installed Tahoe, I used the Migration Assistant to move over just a single (administrator) account from a Time Machine backup. After migrating, the system detected the Sequoia APFS volume group as encrypted and asked me for a password to unlock. None of the user account passwords was accepted so I could not mount the volume. macOS Sequoia, itself, does not show the volume group as encrypted.


I subsequently re-ran the migration specifying all accounts and system files. This seems to have corrected the issue.


- Pie Lover

Mac mini (M2, 2023)

Posted on Sep 24, 2025 11:35 AM

Reply
18 replies

Sep 25, 2025 6:46 AM in response to BlueberryLover

My observation during the upgrade of Sequoia v15.7 to Tahoe 26.0 is that the latter installation forces FileVault encryption on and one cannot undo that until after the installation is complete and one visits System Settings > Privacy & Security > FileVault and switches it off. Had some choice words for Apple after that experience.


I do not install operating systems on external drives, but rather implement them as Parallel's Desktop guests on my M4 Mac Mini Pro with the guests on my TB5 OWC Envoy Ultra.

Sep 25, 2025 12:38 PM in response to MrHoffman

Thanks for the reply. I think that you're correct that the internal SSD uses hardware encryption tied to a unique key assigned to at the factory.


In my case, after the Tahoe installation, there was a mismatch in the APFS encryption as reported by Sequoia (none) and Tahoe (encrypted). In fact, Tahoe requested a non-existent password to mount the internal APFS volume. This is what I reported to Apple.


- Pie Lover

Sep 24, 2025 5:47 PM in response to HWTech

Good advice regarding sticking to the most common configurations.


I had previously checked FileVault and verified that it was turned off (in Tahoe). If I remember correctly, I had used a default admin account which doesn't login to iCloud to install Tahoe.


I plan to have another try installing Tahoe probably after a couple of maintenance updates. Here is my tentative plan:


1) With Sequoia, create a new APFS volume for Tahoe on the external SDD

2) Boot into recovery (using Sequoia on the internal SSD)

3) Recover Sequoia to the APFS volume for Tahoe (on the external SSD)

4) Set the startup disk to to boot from the external SSD

5) Recover user files and system settings using the Migration Assistant (from either the internal SSD or Time Machine)

6) Reboot without logging in to iCloud

7) Use System Update to upgrade from Sequoia to the most recent Tahoe update

8) login to iCloud after the Tahoe installation has completed


I'm hoping the above steps will avoid the difficulties that I encountered during my first attempt.


- Pie Lover

Sep 25, 2025 10:37 AM in response to BlueberryLover

BlueberryLover wrote:

Depends what you mean by "supported"

Not what I mean, what Apple means. This is a very common problem with modern computer tech. Some vendor comes up with a creative new definition of some word with an unambiguous, historical meaning, like "supported" or "available". So now you have multiple competition definitions for the same word. Who wins? Just ask yourself how has the most power. That's the winning definition.

P.S. I actually did contact Apple support for the misinterpreted volume encryption issue. I'm not holding my breath for a response though. :-)

Do you actually have FileVault enabled?


That's another complicated issue that someone recently pointed out that EtreCheck isn't handling correctly. Perhaps Apple doesn't handle it correctly either. "FileVault enabled" doesn't mean the same thing as "Encrypted". Depending on how you're looking at the file system, any combination of values can be valid. So perhaps, deep in some old Migration Assistant code, some Apple developer did a sanity check to make sure that if FileVault is enabled then Encryption must be enabled too.


It's important to see the humour in the situation. We've all been blasted by Apple's marketing engine for months now about xOS 26 and Liquid Glass. But now that it's been released, it's clear that no developers are struggling with these new changes more than Apple developers. Happens every year now. 😄

Sep 25, 2025 10:50 AM in response to BlueberryLover

BlueberryLover wrote:

…P.S. I actually did contact Apple support for the misinterpreted volume encryption issue. I'm not holding my breath for a response though. :-)


Storage encryption is always enabled on internal storage on Mac with T2, and with Apple silicon. Always.


Enabling FileVault on these Macs gives you control over the encryption keys chosen.


Intro to FileVault - Apple Support


Oct 3, 2025 5:24 AM in response to queenieanddicky

Usually, my first step would be to run First Aid in the Disk Utility. In my case, I couldn't even mount my device because macOS thought that it was encrypted.


From what you write, I find it suspicious that the drive stopped working precisely when you upgraded to Tahoe. If you are able, I would suggest reverting to Sequoia and re-testing, if for no other reason than backing up your data. Thinking back to macOS Monterey, I recall many reports of drives that had stopped working after an upgrade. For some, this was fixed by a subsequent maintenance update thus confirming that the problem was related to software/firmware.


- Pie Lover

Sep 24, 2025 1:51 PM in response to BlueberryLover

BlueberryLover wrote:

I suspect that installing macOS Tahoe on an external SSD may not have been thoroughly tested.

I'm not sure it was tested at all since that is not Apple's focus even if testers reported an issue. This is why I tell people not to deviate too far from Apple defaults when customizing their Macs. While booting from an external drive on an M-series may still be supported....some people do find they have issues with it from time to time.


FYI, if you are logged into your AppleID when upgrading the internal SSD to Tahoe, the upgrade process seems to enable Filevault automatically & using the iCloud option for saving the Filevault Recovery Key. It sounds like maybe the Tahoe installer got confused with that step.

Sep 24, 2025 1:29 PM in response to leroydouglas

Yes I did, but it still seems to me that there may be an issue with version 26.0 of Tahoe. I subsequently ran the First Aid command in Disk Utility to confirm that none of the volumes were corrupted. I ran Disk Utility both in Recovery and running under macOS.


I suspect that installing macOS Tahoe on an external SSD may not have been thoroughly tested.


- Pie Lover

Sep 25, 2025 5:43 AM in response to tbirdvet

Thanks very much for sharing your experience. I think that I had missed your reply when I replied to HWTech.


This is essentially the approach that I eventually followed except that I had to first install Sequoia on the external drive. I also ended up re-installing Sequoia on the internal drive to rectify a weird problem with Recovery. Prior to that re-install of Sequoia, Recovery could not find any of the required volumes on the internal SSD. I wonder if this was somehow related to my earlier attempts to install Tahoe. Maybe this also explains that the internal Sequoia looked like an encrypted APFS volume to Tahoe.


Going forward, I think that I'll use the method of first installing the current version of macOS on the external drive, booting into it, and then upgrading via Software Update.


As a footnote, initial testing with Tahoe 26.0 looks positive for my particular setup. That said, I don't find that any of the new Tahoe features are "must haves". I'll probably stick with Sequoia for a while longer.

Sep 25, 2025 7:17 AM in response to VikingOSX

Thanks for this. At one point, I had installed a trial version of Parallels on an old Intel Mac mini. I found that certain functions/applications didn't work well (if I recall correctly, an audio editor didn't work properly).


I can certainly empathize with not using external drives for the OS. I've spent hours recently and in the past (I'm thinking about Monterey 12.3) trouble-shooting installation issues. On the other hand, internal storage is relatively expensive. I chose a 512GB internal SSD and coupled in with a 2TB Samsung T7 and an older 500GB Samsung T5. This configuration works very well on my M2 Mac mini (2023) with 16GB of memory for my needs.


Another reason for wanting to test the new OS on an external drive is avoid potential surprises. My spouse uses her M4 Mac mini for teaching. She gets rather upset when I break something that she depends on. It's hard for her to appreciate "future" benefits when she just wants to get her work done.


- Pie Lover

Sep 25, 2025 9:19 AM in response to etresoft

Thanks. Depends what you mean by "supported", I suppose, but you definitely have a point. For example, Image Playground will inform the user that it can't be run from macOS installed on an external drive. Of course, there could be other instances of such behaviour that I haven't come across.


Your post reminds me that I should run etresoft on Tahoe. Thanks again for creating this very useful tool.


- Pie Lover

P.S. I actually did contact Apple support for the misinterpreted volume encryption issue. I'm not holding my breath for a response though. :-)

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Tahoe mistakes internal SSD APFS volume as encrypted and will not mount

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.