Importing a GELI-encrypted pool requires using the encryption key file and passphrase to decrypt the pool before importing.
When a pool cannot be decrypted, it cannot be re-imported after a failed upgrade or lost configuration, and the data is irretrievable!
Always have a copy of the pool GELI key file and passphrase available.
Select Import Existing Pool and click NEXT.
The wizard asks if the pool has legacy GELI encryption.
Select Yes, decrypt the disks and review the decryption options.
Make sure the Disks selection shows the encrypted disks and partitions that are part of the incoming pool.
Apply the GELI encryption key file by clicking Choose File and uploading the file from your local system.
When a passphrase is also present, enter it in Passphrase.
Click Next and wait for the disks to decrypt.
When the disks are decrypted, select the GELI pool to import.
Review the Pool Import Summary and click IMPORT.
GELI encrypted pools show in Storage > Pools as (Legacy Encryption).
For security reasons, encrypted pool keys do not save to a configuration backup file.
When TrueNAS is installed to a new device and restored with a saved configuration file, keys for encrypted disks are not present and the system does not request them.
To correct this, export the encrypted pool in Storage > Pools with settings > Export/Disconnect.
Do not select Destroy data on this pool?.
Now import the pool again.
During the import, add the encryption keys as described previously.