How to get rid of Time Machine "enter password" dialog?

Question

Level 1

16 points

How to get rid of Time Machine "enter password" dialog?

Each time the computer reboots and the 'normal' user logs in a dialog is presented saying, "Enter a password to unlock the disk 'disk name'" This is an external USB drive used by Time Machine. The 'normal' user does not and should not know the password for this. It is up to the Administrator to to manage backups and restores. The user can click the 'Cancel' button, but the message reappears every time the machine is booted. I have uncheck 'External disks' in Finder > Preferences > General, but that doesn't help.

How can I stop this message from showing for the user after each reboot?

(Note: the "device" options on the question categories now only have Mac mini 2018 or later. Mine is a Mac mini but not 2018, so I've no choice but to select that option -- to whom it may concern)

Mac mini 2018 or later

Posted on Dec 15, 2018 11:49 AM

Reply

Answer 1

Top-ranking reply

markfoley Author

Level 1

16 points

Dec 18, 2018 5:18 PM in response to BDAqua

I logged in as the user after a reboot and entered the encryption key into the "password" dialog (it's the encryption key, not really a password. I figured that out by trial and error). I checked "save in my keychain". That seems to do the trick although, as I said, not very secure -- surprising for Apple. For one thing. the key is in the user's keychain. It shouldn't reside there or anywhere specific to this user. For another, the user now has access to the time machine backup, which he should have (according to our policy), and anyone who might gain access to the user's desktop also has access.

Nevertheless, for the time being, this is the only solution I've found to NOT showing the "Enter a password to unlock the disk" message when logging in after a boot. To bad there isn't a "don't show this message again" option. I'll investigate those other alternatives when I get a chance.

Reply

Answer 2

BDAqua

Level 10

250,259 points

Dec 15, 2018 12:39 PM in response to markfoley

Is the Time Machine volume encrypted I take it?

Reply

Answer 3

BDAqua

Level 10

250,259 points

Dec 16, 2018 10:17 AM in response to markfoley

Yes, the user will have to cancel unless you can Screen Share & enter the PW.

Reply

Answer 4

markfoley Author

Level 1

16 points

Dec 16, 2018 9:55 AM in response to BDAqua

Not sure what you mean by "remotely initiate it". I have remote access to the computer via VNC. By "pretty much stuck" do you mean the user will always have to Cancel this dialog upon login after reboot?

Reply

Answer 5

BDAqua

Level 10

250,259 points

Dec 16, 2018 2:10 PM in response to markfoley

Hmmm, good point yes.

I wonder if there's a way to run TM in an admin account & use Fast User Switching to let the user login?

Maybe Tri-Backup would solve this, does everything TM does & far5 more, I used it in the past to remotely backup 4 Macs on the same Network...

https://www.tri-edre.com/english/tribackup.html

Reply

Answer 6

markfoley Author

Level 1

16 points

Dec 16, 2018 8:07 PM in response to BDAqua

I'll check out Tri-Backup. We've also used Acronis in-house on Windows for years. They too have a Mac version, also worth checking out.

Meanwhile, I take it there is no way to simply NOT show this dialog to a normal user when logging in after a reboot, right?

Reply

Answer 7

markfoley Author

Level 1

16 points

Dec 19, 2018 2:47 AM in response to BDAqua

Wait - there's more! If the user DOES NOT enter the encryption key and 'Cancels', and later tries to access the Time Machine, he gets the message, "Your Time machine backup disk can't be found". Does this mean the drive is not mounted and the backup is not running at all? Behind that message I see Time Machine historical panels starting with "Today (now)", so maybe it is running, but the user can't get to it? I'll check back tomorrow as the Admin and see if there are backups going forward. If so, then OK, the user will just have to be burdened with clicking the Cancel after reboot. If the backups really aren't running that I have even more issues with Time Machine. More later.

I know I marked this as solved, but I keep getting surprises.

Reply

Answer 8

markfoley Author

Level 1

16 points

Dec 15, 2018 9:00 PM in response to BDAqua

Yes.

Reply

Answer 9

BDAqua

Level 10

250,259 points

Dec 16, 2018 12:53 AM in response to markfoley

I think you're pretty much stuck, can you remotely initiate it?

Reply

Answer 10

markfoley Author

Level 1

16 points

Dec 16, 2018 11:14 AM in response to BDAqua

But, if I enter the password on the user's login/desktop, would that not mean the user has direct access to the Time Machine? Could the user then restore files other than his/her own?

Reply