8 Replies Latest reply: Jan 21, 2013 2:48 AM by BordeauxQuill
BordeauxQuill Level 1 Level 1 (0 points)

My basic question applies to encryption on Mountain Lion 10.8.2 both via Time Machine and through Finder.  I am using a couple of 640GB Western Digital My Passport Studio Drives.

 

First, setting up Time Machine - if I follow the instructions listed at http://support.apple.com/kb/HT1427, when I tell Time Machine to encrypt the newly formatted drive - in Disk Utility, as Mac OS Extended (Journaled) - it performs the backup for an hour and then spends over 12 hours (cannot quite recall how long, it does not matter) performing the encryption.  However, if I first of all format using Disk Utility as Mac OS X (Journaled, Ecrypted), which takes 20 seconds, Time Machine performs the backup and then appears to be complete.  I tried to restore some files and all seems fine.  My question, then: is there likely to be an encryption of restore problem with this latter approach, which saves half a day of processing?

 

Second, a related question with encryption via Finder.  If I format in Disk Utility as Mac OS Extended (Jornaled, Encrypted) it takes the 20 seconds.  If I format as Mac OS Extended (Journaled) and then use 'Encrypt...' via Finder, again, it seems to be taking many hours (dskutil cs list in Terminal is showing 4% done after half an hour or so).  Again, why not simply format the drive as ac OS Extended (Jornaled, Encrypted) and save this rigmarole? I am concerned that doing it the 'format as encrypted' way there may be some problem with the outcome, otherwise I am unsure why Apple would recommend this approach.  I should appreciate any thoughts people have.

 

Thank you.

 

------

 

Incidentally, this encryption process is ongoing, but when I right-click the disk on my Desktop the pop-up menu shows (greyed out) 'Decrypting 'DiskName"...', when it is in fact encrypting.  I wonder why?

 

Finally, the reason I know all this is that I have gone through the process more than once, not entirely by choice.  The firmware in the WDC drives was 10.09.  Their updater (available at the link below) could not find the drive (that it had previously identified) whilst it was encrypted with FileVault.  I reformatted to Mac OS Extended (Journaled) - this was quicker than doing a 12-hour decryption that may not have worked anyway - updated to firmware 10.12 and am now re-encrypting.  Apparently, Mountain Lion does not play too well with earlier firmware versions, so feel free to learn from my lesson.

 

http://www.wdc.com/wdproducts/wdsmartwareupdate/firmware.asp?id=wdfMP_Studio&os= MAC


MacBook Air, OS X Mountain Lion (10.8.2)
  • 1. Re: External disk encryption: why not save time and format as (Journaled, Encrypted)
    Linc Davis Level 10 Level 10 (117,895 points)

    When you encrypt a volume in Disk Utility, the actual encryption is deferred until the next time you log in and enter the password. It takes just as long.

  • 2. Re: External disk encryption: why not save time and format as (Journaled, Encrypted)
    BordeauxQuill Level 1 Level 1 (0 points)

    Thank you, Linc.  This makes sense, but bizarrely, I have seen no evidence of this happening on the drives - even after reboot, no ongoing disc access; no indication in Finder that the disc was being encrypted, etc.  The 'Decrypt...' option was available immediately on volume Chronos (see below).  Then again, the last time I saw this was before I upgraded the firmware, so perhaps that caused a glitch.  Still, here is the dskutil info on the two WDC drives:

     

    Apollo - now firmware 10.12 - is being encrypted after I formatted with (Journaled)

    Chronos - still firmware 10.09 - shows that it is fully encrypted - it was formatted with (Journaled, Encrypted) earlier today - not enough for the long encryption to have completed

     

    +-- Logical Volume Group A36...

    |   =========================================================

    |   Name:         Apollo

    |   Size:         639088156672 B (639.1 GB)

    |   Free Space:   16777216 B (16.8 MB)

    |   |

    |   +-< Physical Volume D9...

    |   |   ----------------------------------------------------

    |   |   Index:    0

    |   |   Disk:     disk2s2

    |   |   Status:   Online

    |   |   Size:     639088156672 B (639.1 GB)

    |   |

    |   +-> Logical Volume Family D4...

    |       ----------------------------------------------------------

    |       Encryption Status:       Unlocked

    |       Encryption Type:         AES-XTS

    |       Conversion Status:       Converting

    |       Conversion Direction:    forward

    |       Has Encrypted Extents:   Yes

    |       Fully Secure:            No

    |       Passphrase Required:     Yes

    |       |

    |       +-> Logical Volume 4C...

    |           ---------------------------------------------------

    |           Disk:               disk3

    |           Status:             Online

    |           Size (Total):       638752608256 B (638.8 GB)

    |           Size (Converted):   112166174720 B (112.2 GB)

    |           Revertible:         Yes (unlock and decryption required)

    |           LV Name:            Apollo

    |           Volume Name:        Apollo

    |           Content Hint:       Apple_HFS

    |

    +-- Logical Volume Group 25...

        =========================================================

        Name:         Chronos

        Size:         639088156672 B (639.1 GB)

        Free Space:   0 B (0 B)

        |

        +-< Physical Volume 4B...

        |   ----------------------------------------------------

        |   Index:    0

        |   Disk:     disk4s2

        |   Status:   Online

        |   Size:     639088156672 B (639.1 GB)

        |

        +-> Logical Volume Family 2D...

            ----------------------------------------------------------

            Encryption Status:       Unlocked

            Encryption Type:         AES-XTS

            Conversion Status:       Complete

            Conversion Direction:    -none-

            Has Encrypted Extents:   Yes

            Fully Secure:            Yes

            Passphrase Required:     Yes

            |

            +-> Logical Volume CF...

                ---------------------------------------------------

                Disk:               disk5

                Status:             Online

                Size (Total):       638769381376 B (638.8 GB)

                Size (Converted):   -none-

                Revertible:         No

                LV Name:            Chronos

                Volume Name:        Chronos

                Content Hint:       Apple_HFS

  • 3. Re: External disk encryption: why not save time and format as (Journaled, Encrypted)
    Linc Davis Level 10 Level 10 (117,895 points)

    Back up all data.

     

    Triple-click anywhere in the line below to select it:

     

    diskutil cs list

     

    Copy the selected text to the Clipboard (command-C).

     

    Launch the Terminal application in any of the following ways:

     

    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

     

    ☞ In the Finder, select Go Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

     

    ☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.

     

    Paste (command-V) into the Terminal window.

     

    Post any lines of output that appear below what you entered — the text, please, not a screenshot.

  • 4. Re: External disk encryption: why not save time and format as (Journaled, Encrypted)
    BordeauxQuill Level 1 Level 1 (0 points)

    Linc, I was editing my previous post to include the diskutil information when you posted this request and instructions.  Please see above.  Thank you.

  • 5. Re: External disk encryption: why not save time and format as (Journaled, Encrypted)
    Linc Davis Level 10 Level 10 (117,895 points)

    That shows one volume ("Apollo") with encryption in progress, and one ("Chronos") that hasn't yet started to be encrypted.

  • 6. Re: External disk encryption: why not save time and format as (Journaled, Encrypted)
    BordeauxQuill Level 1 Level 1 (0 points)

    Mine is a logical rather than an expertly informed interpretation, but surely the data below suggest that the disc is encrypted? When I plug it in it does not attempt encryption and Tine Machine stopped as soon as the backup finished, rather than attempting to continue with encryption. Apologies if I am being slow.

     

            Encryption Status:       Unlocked

            Encryption Type:         AES-XTS

            Conversion Status:       Complete

            Conversion Direction:    -none-

            Has Encrypted Extents:   Yes

            Fully Secure:            Yes

            Passphrase Required:     Yes

  • 7. Re: External disk encryption: why not save time and format as (Journaled, Encrypted)
    Linc Davis Level 10 Level 10 (117,895 points)

    You're looking at the logical volume family, not the logical volume, which has not been encrypted.

     

    I don't think there's anything else I can contribute here. Obviously, a multi-gigabyte hard drive can't be encrypted in a few seconds. That is not physically possible. You've chosen to disregard the procedure recommended by Apple for encrypting a Time Machine backup volume. That's your privilege, but in that case you should also figure out why your procedure doesn't work. Good luck.

  • 8. Re: External disk encryption: why not save time and format as (Journaled, Encrypted)
    BordeauxQuill Level 1 Level 1 (0 points)

    Thanks for your support, Linc - that was a useful distinction.

     

    I have not chosen to disregard the recommended procedure (for the non-TM drive I could find no Apple guidelines that meaningfully differentiated between Finder and Disk Utility).  Rather, having had the chance to experiment with two methods for different purposes, and now left with a handful of unexplained anomalies in both cases (noted above), I was curious to learn a little more about what was going on.  Other comments on the web (eg http://macmost.com/forum-encrypting-an-external-hard-disk-with-finder-vs-disk-ut ility.html) are inconclusive.  Anyway, I appreciate your investment of time in answering my initial query.