Drive encrypted but on network. Need to worry?
Hi. I have a time machine drive encrypted with a really good password. I use that drive to backup my computer. Recently I have attached this drive to another Mac which hosts my website and acts as a server for music as well. I like it like this because I can just connect to my network and backup my computer without having to actually attach my Time Machine disk to my main computer. My server Mac is also accessible over the Internet through Apple remote desktop, or VNC.
It just recently occurred to me that if I can see my server desktop from anywhere in the world I also see my time machine backup drive mounted on its desktop and I can freely access all content of that drive from anywhere in the world. It seems to me that this would compromise security and that the encryption of my time machine drive does not matter at all because it is mounted on my server desktop.
Can anyone suggest if there is a way for me to have that drive mounted on my server desktop, have the server be reachable through filesharing and Apple remote desktop over the Internet and yet have the contents of my time machine drive be as secure as if a burglar steals my encrypted drive?
thank you very much for your suggestions
The normally way for a local time machine backup drive to be used and encrypted is for the entire backup drive to by encrypted. The normal way for a Mac server to provide Time Machine backup access to other Macs is that the other Macs create a disk image on the Time Machine drive being shared by the server. These disk images can be and normally are encrypted.
This second approach means that as far as the server is concerned it only sees the disk image files and not the contents inside them. There is no need for the server to know or store the password to access such encrypted disk images files. Therefore with this approach the contents would be secure even if someone gained remote access to the server.
It sounds like you are using a disk originally setup for local access and at best are mounting it on the server by entering the full disk encryption password. This means that it is completely unprotected while it is mounted on the server.
You should consider wiping the drive and setting up proper network backups which will then create disk images and let you set encryption for the disk images.
PS. You might want to disable VNC access over the Internet and only make this possible via a VPN connection. You could use the VPN server function in the same server software. It is generally best practice to only make available via the Internet those protocols absolutely needed, e.g. Web for web serving, and email for a mail server. Everything else e.g. file sharing, VNC, etc. should be limited to being only accessible via a VPN connection.
Similar Messages
-
Cannot decrypt HP Drive Encryption
Greetings, I own the computer detailed above, and it's protected by (my own finger's) fingerprint protection, courtesy of HP Client Security.The PC has run into a couple of problems (corruped fan, BSoD's etc), so I contacted HP in my local area for support. Their tech and I ran into a funny problem; he cannot access the system, the BIOS, or anything without my fingerprint. So now, I'm trying to disable HP Drive Encryption - but I can't.When I enter HP Client Security Manager, and go to HP Drive Encryption section, my C (and only) drive is ticked and says "Encrypted". The type of encryption appears to be "Software". When I untick it, nothing happens, and a "Next" button WILL NOT appear. Then, when I tick it again, a "Next" button will appear, even though the drive is already encrypted. Pressing "Next" in that situation basically prompts me to back up that secure emergency key file and encrypt my already encrypted drive all over again. It won't let me decrypt. I cannot even Refresh (reinstall Windows 8.1 while keeping personal files intact) or factory reset from the startup settings while Drive Encryption is on. My computer is running HP Client Security Manager 8.2.0.1663. I thought the problem might be that the version is outdated. So I opened HP Support Assistant and searched for updates. It claimed there aren't any. Just in case, HP Client Security claims that version of HP Drive Encryption is powered by Winmagic. But it's not something I've deliberately installed, it says "HP" all over the place.Please help me before I finally throw this useless brick out the window. Regards,
Same problem. Still no answer. Unticking the decrypted drive but then no way to save that change or apply that change or go to next steps. Can only exit that page saying that it won't save the changes. So no way to decrypt drive to install Windows 10 and uninstall this horrible HP Client security nonsense program. Hey HP. Post an answer here. how hard would that be? Or do you really think it is more efficient for us to call your stupid support line and take the time (one by one for each of us) to talk to a support rep? I think the easiest solution is to just buy a Lenovo and junk this nonsense HP client security. Lenovo had so much better hardware management that I never needed support --- ever. It just worked. If HP doesn't post a response. I'll never buy an HP again.
-
Dead drive in a Zen Xtra, need help w/ replacem
The dead dri've in my 40Gb Zen Xtra has been removed from the player and its been sitting in pieces for the past week or so. I would like to know what I would need to do to a replacement dri've (have a 40Gb notebook dri've ready to go) in order for the player to A. recognize it and B. be able to put songs on it. Do I have to format it in a certain way before hand or will the firmware update be able to do that? Help is much appreciated.
-Mobious-I was having similar troubles trying to get a big Maxtor operational. I had to set a jumper on the back of the drive ... then was able to follow the advice given below. (Please see complete text of other item).
I've been successful using Maxtor 60GB IDE drives on Solaris 8 on Sparc by doing the following:
1. Boot the system off System Software 1 of 2 CD, and follow the instructions until you can open a command window.
2. Once in the command window you need to type "format". Choose the hard drive (disk), but then you need to create a new "type" that is compatible with the solaris driver software and uses most of the disk. For large IDE drives, the only thing that matters is the actual number of usable sectors (which are 512 bytes each). You can go to the Maxtor website to get the real number of sectors for your drive. Then you need to make up a set of cyl, head, sectors numbers to enter into the "type". The limits on the Solaris driver (found by hitting enter at the prompts) are: max Cyl: 32767, max heads: 64, max sectors: 256. These are different than the limits for Windows. ATA limits max heads to 16, so I use that to be safe. Therefore I choose to use 256 sectors, 16 heads, and then choose a number of cylinders that will yield a number equal or less than the total number of sectors allowed on the drive (ie: total sectors = cyl*heads*sectors). Then subtract 2 from the cylinders when entering the number of cyl at the prompt, as you'll need them for the following steps where it wants to reserve two cylinders. When you get to the name of the drive, I choose to type the name of the drive with an * appended to the end to signify a difference. Once done defining the "type", write the label.
3. Proceed with installation.
(Again, please see other item in forum (something about installing a bix maxtor).
You can email me at [email protected] if you want more specific advice.
Cheers, John -
I just purchased Time Capsule today. I ONLY want to use it as an external drive. I do not need it for Time Machine. I need to free up room on my computer. As of now, I can't even load updates. I can see the TC in my finder, but when I click on a file or video to drag and drop, I get message that TC can't be modified. Help please!
I agree with Kappy.. passing files and especially via wireless is slow as slow.
Just need to be sure your TC is the new AC model??
And the OS on the computer is Lion?
Have you completed the setup of the TC via the utility? You do still need to get internet via the TC so it has to be plugged into the main router..
Give us the full picture of the network.
Then we can help you get into it.. whether you should put your files on it is another question. -
Greeting,
I want to reformat my external hard drive using Mac OS Extended (Journaled, Encrypted ) but before formatting it, I want to make sure that if I loose the hard drive or the hard drive get stolen, no one will be able to retrieve or recover the information on it so could you tell me what kind of encryption will be used or is there any way to recover the information?
Thanks!I think FileVault is used to encryp internal hard drive but I wanna encrypt an external hard drive with Mac OS Extended Journaled Encrypted which is completely different!
-
Help needed. I have a 3TB external hard drive partitioned into 1TB's. I used one partition as backup for the main computer hard drive. But now it is greyed out as shown in the disk utility and its name changed, i dont know how that happened, i tried verifying and repairing it but had no luck. I also tried mounting and unmounting it but still no solution. Anyone to help please?
Looks bad. I would strongly advise backing up the stuff on the other two partitions as soon as possible in case the rest of the drive goes wrong.
Beyond that, Disk Utility has limited abilities to repair disks, DiskWarrior uses a different approach and might, emphasis might be more successful. It has certainly done the job for me in the past when Disk Utility could not.
See http://www.alsoft.com/diskwarrior/ -
I perviously transfered all my iTunes music to an external hard drive. But now when I connect the external hard drive and try to play a song, I get an error message saying that I need to "locate" my music. I don't how to find it on my external hard drive. Please help for I am not that computer savy and don't want to mess anything up.
Thanks!I called Apple Support and they walked me through it. They told me to basically copy and paste my music to the external hard drive. (I think.) Or maybe it was they had me transfer a folder to the EHD. I don't exactally remember it was a few years back. But I tried to plug in the EHD before starting and...nothing. Still says same thing, "locate file."
-
I need to rebuld the "C" drive on my computer will need to reinstall adobe cs6 when I am done, but have moved recently and lost the data to get that done! Help!
Downloads available:
Suites and Programs: CC 2014 | CC | CS6 | CS5.5 | CS5 | CS4 | CS3
Acrobat: XI, X | 9,8 | 9 standard
Premiere Elements: 13 |12 | 11, 10 | 9, 8, 7
Photoshop Elements: 13 |12 | 11, 10 | 9,8,7
Lightroom: 5.7| 5 | 4 | 3
Captivate: 8 | 7 | 6 | 5
Contribute: CS5 | CS4, CS3
Download and installation help for Adobe links
Download and installation help for Prodesigntools links are listed on most linked pages. They are critical; especially steps 1, 2 and 3. If you click a link that does not have those steps listed, open a second window using the Lightroom 3 link to see those 'Important Instructions'.window using the Lightroom 3 link to see those 'Important Instructions'. -
I've installed bootcamp 4.0 on my iMac 27. Everything works superb, but for playing need for speed run or battlefield 3 I need catalyst driver 11.7 or higher. How can I update my graphics? Is there a possibility except waiting for a new bootcamp version?
But how do you install the drivers if Bootcamp is running interference?
Bottom line, I'ev tried to install three different versions of updated ATI driver sover the last few momnths and on each and every occassion have ended up with the original Bootcamp driver. A number of current games are unplayable on a Mac running Bootcamp as a result.
And if I can't run the software I want, then Bootcamp is as useless as boobs on a bull. -
Mapped Drive B:\ to a network share but does not show up in Windows Explorer.
I mapped drive B: to a network share but it does not show up in Windows explorer. I can go to the drive by typing b:\ but is not visible in explorer. But if I login as local admin it shows up in windows explorer. Any suggestions?
Hi Lloyd Reeves,
Based on my research, I would like to suggest the following:
Disconnect the mapped drive and map it again.
Ensure the user is using an administrator account; or change another user account to have a try.
Create a shortcut for a share folder and see if it will disappear.
In addition, it would be helpful for future troubleshooting if you could help to collect the following information:
Which method did you use to map drive?
Was there any error message in the Event log? If so, please provide the detailed information.
For your information, please refer to this similar case:
http://social.technet.microsoft.com/Forums/windows/en-US/6acab187-c46c-4ff9-8604-196c64ea8995/mapped-drives-not-visible-in-explorer-although-shown-in-map-network-drive?forum=w7itpronetworking
Regards,
Lany Zhang -
I need to download driver software but where would i get the software?
i need to download driver software but where would i get this software?
spam1122 wrote:
i need to download driver software but where would i get this software?
Without knowing what driver software you need it is difficult to point you to the correct place.
Stedman -
I need to erase my hard drive. But the drives are grey when I go to Disk Utility.
Restart the computer with the Command and R keys held down and use the Disk Utility from there. If you're going to sell or give away the computer, press Option as well.
(107083) -
Time machine - how to stop external hard drive encryption?
Hi all
I've just gotten a larger hard drive and more RAM for my 1.5 year old MacBook Pro, running OSX 10.7.5. I restored my system using the latest Time Machine backup at the time from the external HD I want to continue to use. Somewhere along the line, after the restore, I must have replied "yes" to encrypt the external HD and now it's dong the encryption thing for hours and hours and hours. Looking at the contents of the external HD, it appears to have done backups whenever I've attached the external drive, so I think my data is secure.
The external drive is a Western Digital 2 TB, with a power cord. I'm using it for Time Machine and my Aperture vault. I may want to add my Bootcamp partition to the Time Machine, though I've been backing that up separately.
Is there any way I can suspend this encryption and set it to "no encryption" now that I've done the deed? I've looked through the community discussions on this (as well as Time Machine Help, and on the internet), and I don't see anything that guides me in this (at least, only something from earlier this year that indicates that I would have to reformat the external drive - is this still the case?).
Can I just shut down my MBP with this process going on? This HD is not USB powered, so I can't just carry the two machines to another location, as the external is plugged in and unplugging it would shut it off.
Would upgrading to Mountain Lion help with this situation? I'm thinking I want to do this anyway, as I like the sound of some of the new features.
Thanks so much.The problem here is the way Apple chooses to implement Time Machine Backup in 10.6.x to a Network volume. When TM first came out myself and a bunch of similarly naive Unix hackers figured we could get the best of both worlds by backing up with Time Machine to a backed up or otherwise redundant network volume using Time Machine. But in the beginning TM didn't backup to network volumes. It does now by creating a sparse bundle on the network volume and backing up to the Sparse bundle as if it were a physical, local, disk drive. I seems logical to infer that Time Machine was written to backup to locally connected disk drives which differ from network disk drives in one very important respect: You can tell a local, physical disk drive that you need to know the status of any given write operation and you can trust that result with a reasonably high degree of confidence. That same can't be said for a write to network drive so Apple fakes it by creating a Pseudo Drive or Disk Image Drive on the network volume and writing way. The Sparse Bundle Error comes up when the Pseudo Drive wasn't put away correctly. There are filesystem repair programs to fix this condition which are described in other threads. Dig around for "fsck sparse bundle" on Google the next time this happens and you may be able to rescue things.
-
Do I need to worry about this?
It has been an interesting few months with my one year old 13" MBP. Lots of spinning beach balls followed by a hard drive crash. Apple was quick to replace the hard drive. And as I had everything backed up on Time Machine I was able to quickly restore everything.
All was good for a few months until the beachballs, freezes, and finder crahes began again. Made another trip to the Genius bar where they thought I might have re-downloaded a corrupt file from Time Machine. They cleaned my temp files and caches and things seemed to work well in the store.
When I returned home I had the same issues. They had prepared me for this. So a system restore, a re mount and re start of time capsule and everything seems to be working well. Speedy, no crashes, no freezes.
The issue is that I wanted to double check so I ran disk verify and permission verify on the disk utility. To my surprise it came back with a LONG error log as below. So long, I could not get it all into this post. But it seems like a recurrent message. Do I need to worry about any of this? What should I do next, if anything? Thanks in advance for your response.
Verifying volume “Macintosh HD”
Performing live verification.
Checking Journaled HFS Plus volume.
Checking extents overflow file.
Checking catalog file.
Checking multi-linked files.
Checking catalog hierarchy.
Checking extended attributes file.
Checking volume bitmap.
Checking volume information.
Invalid volume file count
(It should be 624512 instead of 624514)
Invalid volume directory count
(It should be 172781 instead of 172779)
The volume Macintosh HD was found corrupt and needs to be repaired.
Error: This disk needs to be repaired. Start up your computer with another disk (such as your Mac OS X installation disc), and then use Disk Utility to repair this disk.
Verify permissions for “Macintosh HD”
Group differs on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AAUAdvanced.nib/keyedobjects.nib", should be 0, group is 80.
Permissions differ on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AAUAdvanced.nib/keyedobjects.nib", should be -rw-r--r-- , they are -rw-rw-r-- .
Group differs on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AAUAssistant.nib/keyedobjects.nib", should be 0, group is 80.
Permissions differ on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AAUAssistant.nib/keyedobjects.nib", should be -rw-r--r-- , they are -rw-rw-r-- .
Group differs on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AAUDocument.nib/keyedobjects.nib", should be 0, group is 80.
Permissions differ on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AAUDocument.nib/keyedobjects.nib", should be -rw-r--r-- , they are -rw-rw-r-- .
Group differs on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AAUDrives.nib/keyedobjects.nib", should be 0, group is 80.
Permissions differ on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AAUDrives.nib/keyedobjects.nib", should be -rw-r--r-- , they are -rw-rw-r-- .
Group differs on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AAUStatisticsPanel.nib/keyedobjects.nib ", should be 0, group is 80.
Permissions differ on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AAUStatisticsPanel.nib/keyedobjects.nib ", should be -rw-r--r-- , they are -rw-rw-r-- .
Group differs on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AAUTaskSheet.nib/keyedobjects.nib", should be 0, group is 80.
Permissions differ on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AAUTaskSheet.nib/keyedobjects.nib", should be -rw-r--r-- , they are -rw-rw-r-- .
Group differs on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AAUTasks.strings", should be 0, group is 80.
Permissions differ on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AAUTasks.strings", should be -rw-r--r-- , they are -rw-rw-r-- .
Group differs on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AAUWirelessPanel.nib/keyedobjects.nib", should be 0, group is 80.
Permissions differ on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AAUWirelessPanel.nib/keyedobjects.nib", should be -rw-r--r-- , they are -rw-rw-r-- .
Group differs on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/APPanels.nib/keyedobjects.nib", should be 0, group is 80.
Permissions differ on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/APPanels.nib/keyedobjects.nib", should be -rw-r--r-- , they are -rw-rw-r-- .
Group differs on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AUFirmwareDownloader.nib/keyedobjects.n ib", should be 0, group is 80.
Permissions differ on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AUFirmwareDownloader.nib/keyedobjects.n ib", should be -rw-r--r-- , they are -rw-rw-r-- .
Group differs on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AirPortAssistant.strings", should be 0, group is 80.
Permissions differ on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AirPortAssistant.strings", should be -rw-r--r-- , they are -rw-rw-r-- .
Group differs on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AirPortErrors.strings", should be 0, group is 80.
Permissions differ on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AirPortErrors.strings", should be -rw-r--r-- , they are -rw-rw-r-- .
Group differs on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AirPortSettings.strings", should be 0, group is 80.
Permissions differ on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AirPortSettings.strings", should be -rw-r--r-- , they are -rw-rw-r-- .
Group differs on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AirPortTimeZones.strings", should be 0, group is 80.
Permissions differ on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AirPortTimeZones.strings", should be -rw-r--r-- , they are -rw-rw-r-- .
Group differs on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AirPortUtilityHelp/AirPortUtilityHelp.h elpindex", should be 0, group is 80.
Permissions differ on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AirPortUtilityHelp/AirPortUtilityHelp.h elpindex", should be -rw-r--r-- , they are -rw-rw-r-- .
Group differs on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AirPortUtilityHelp/AirPortUtilityHelp.h tml", should be 0, group is 80.
Permissions differ on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AirPortUtilityHelp/AirPortUtilityHelp.h tml", should be -rw-r--r-- , they are -rw-rw-r-- .Scott Adelman wrote:
The issue is that I wanted to double check so I ran disk verify and permission verify on the disk utility. To my surprise it came back with a LONG error log as below. So long, I could not get it all into this post. But it seems like a recurrent message. Do I need to worry about any of this? What should I do next, if anything?
Verifying volume “Macintosh HD”
Invalid volume file count
(It should be 624512 instead of 624514)
Invalid volume directory count
(It should be 172781 instead of 172779)
The volume Macintosh HD was found corrupt and needs to be repaired.
Error: This disk needs to be repaired. Start up your computer with another disk (such as your Mac OS X installation disc), and then use Disk Utility to repair this disk.
You definitely need to repair your disk. If you can, boot from something else, such an external disk or the system discs that came with your Mac. You can also cause the disk to be repaired by booting into "Safe Mode": http://support.apple.com/kb/ht1564 . If that process can't repair your disk, you may need one of the more-powerful disk utilities such as Disk Warrior.
Verify permissions for “Macintosh HD”
Group differs on "Applications/Utilities/AirPort Utility.app/Contents/Resources/pl.lproj/AAUAdvanced.nib/keyedobjects.nib", should be 0, group is 80.
You can ignore most permissions repair messages:
http://support.apple.com/kb/TS1448 -
Hi, I'm using a Mac Pro here. I am trying to connect it with my NAS hard drive. But i could not connect to it because i have an ethernet which connects to the intranet in my company and Air Port for the internet and it could not detect the the ip address after i input the correct address on "Connect to Server" window. Please help! Urgent! Thanks
I did not say it is not possible.
I said if your company networks are monopolizing both ports, you should talk to them about what options are available.
Maybe you can get the company Intranet over wireless if you change some configuration items such as Subnet Mask.
Maybe you can get on the Internet over Ethernet.
You really need to ask them, and do not let them blow you off because you have a Mac. If they balk, ask them how it would be done on a PC (becasue it will be the same on a Mac).
Maybe you are looking for
-
New iMac, old "dead" XP laptop with backup of iTunes library on Iomega eGo
Here is the scoop - We have a brand new iMac and would like to make it where we control iTunes. My wife's iPod has the bulk of our iTunes library on it but not all of it. We have an external Iomega eGo that has a fairly recent backup of our iTunes li
-
After upgrading Firefox to version 14.0.1 i noticed when i typed in my company's website address that firefox went to the https:// version of the site when it never did that before. Example, if you type in amazon.com in the URL bar, you briefly see t
-
How can i reduce the number of calls archived in recents
How can i reduce the number of calls archived in recents
-
HT1819 error in iTunes #11111, try again later. Never works. What's up?
Produced a podcast in garageband, post it in iWeb, but when i submit it to iTunes, I keep getting a message of an error in iTunes #11111, try again later. Never works. What's up?
-
Copy of screen variants possible?
I have a screen variant in t-code fb70 for a user and I want to give another user the same screen variant. How can I copy the screen variant in this or other financial t-codes?