Filevault/Encryption - internal HD
What are the benefits of:
1) Encrypting my internal hard drive with Filevault? Isn't having a username and password to my account enough? For example, if someone stole my Mac and could not crack my username and password, could they still get to my files?
2) Encrypting my external Time Machine backup? If someone just stole my Time Machine drive and plugged it into their Mac, could they restore from it without my username and password? If no, then what would be the benefit of encrypting the data?
Thanks,
Tony
if someone stole my Mac and could not crack my username and password, could they still get to my files?
Without encryption, yes. With encryption, no.
If someone just stole my Time Machine drive and plugged it into their Mac, could they restore from it without my username and password?
Same answer.
Similar Messages
-
FileVault Encryption Password - Yosemite
I enabled the FileVault encryption when upgrading my Mac to Yosemite. I was not given a passcode. Yosemite allows use of your login password as the method to access the encrypted drive.
However, I saw a posting on another site that has me confused. the poster on that site indicated that the encrypted drive's password is the password that was in place AT THE TIME of encryption. And that it is permanent and does not change if one changes the AppleID/iCloud password.
Is that the case?
If so, this could prove very problematic. I know my passwords, and very likely would be able to recall what I used when I did the encryption. But I also support several family members that certainly would not remember their password months or even years back. Nor would they be able to pinpoint what their password was on a specific date.
My assumption was that the current AppleID/iCloud password was the "master" that would always unlock the encrypted drive.I think I am going to do that this w/e and re-enable FileVault manually this way I get the key. I want to be sure I have all of the recovery capabilities covered.
I do find Apple's implementation of FileVault to be lacking in the details. For instance, wen you turn it on via the Yosemite install, it should clearly say that you will not receive a recovery key. But the actual messaging implies you will get a key.
Also, here is a contributing factor to the confusion. My iCloud password is being used to unlock the Mac. The Mac PW is still what was being used when I encrypted the drive. Therefore, if I change the iCloud password, and keep it "synced" with the Mac password, then my FileVault password would in fact be different (and certainly easy to lose track of down the road.
I keep my PW info very organized in 1Password, so I don't fear losing track of my information. But the other computers I help to set up (wife's, son's, niece's, friend's) would be tougher to track as I would not know if/when they change passwords. -
How to cancel filevault encryption process midway, since it is demanding 12 hours
After upgrading to OS-X Yosemite version 10.10, I enabled filevault encryption option. Since then whenever I connect to the electric power, the disk starts encrypting procedure. I try to turn it off, it says to wait until the file encryption completes. Moreover the estimated remaining time for encryption is displayed as 12 hours. I just don't want it. kindly guide.
Regards & Thanks
Raj Vardhan VarmaHi,
These documents talk about purgin WF_NOTIFICATIONS_OUT queue. But document i mentioned
says.
7. Try rebuilding the WF_NOTIFICATION_OUT queue if necessary
The wfntfqup.sql script rebuilds the WF_NOTIFICATION_OUT queue by dropping and recreating
that queue, removing pending notification messages from the WF_DEFERRED queue, and
repopulating the WF_NOTIFICATION_OUT queue from the Oracle Workflow Notification System
tables.
Wfntfqup.sql Version >=115.9
If you have implemented Oracle Alert and the WFNOTIFICATION_OUT queue contains any pending_
alert e-mail messages, those messages must be processed before the queue can be rebuilt. The
wfntfqup.sql script checks the queue for any alert e-mail messages and, if it finds any, the
script returns an error message that specifies how many alert e-mail messages are pending
and indicates that these messages must be processed before the script can run.
Kindly suggest. -
Automated Filevault encryption
Hi,
I want to deploy automated Filevault encryption using an installer in the same way that Mac OS enables it, but with my own recovery key.
So, what I need is a script or something to enable Filevault the same way as Lion does.
I know that I can do "diskutil cs convert /dev/disk0s2 -passphrase xyz" in the terminal - I will be asked this passphrase every time I boot my mac and can afterwards type in my personal password. In the security panel I can set-up other users for FileVault usage.
My question here is: What command is it, that I can use to give users access to my FileVault encrypted Volume without knowledge of the "real" passphrase?Yes, we have been successful using a compiled binary (csfde), borrowed from the CauliflowerVest project(http://code.google.com/p/cauliflowervest/) and the Apple Recovery Key process (http://support.apple.com/kb/HT5077).
We use a AppleScript setup script that we have manufactured for the purpose of deploying laptops to our students and faculty (4000 +).
We create a cached mobile account to allow intial login:
do shell script "/System/Library/CoreServices/ManagedClient.app/Contents/Resources/createmobile account -n " & UserID with administrator privileges
Then enable FileVault 2:
do shell script "cp " & POSIX path of (the path to me as string) & "/Contents/Resources/FileVaultMaster_noprivate.keychain /Library/Keychains/FileVaultMaster.keychain" with administrator privileges
do shell script POSIX path of (the path to me as string) & "/Contents/Resources/csfde disk0s2 " & UserID & " " & UserPWD
do shell script "rm -f /Library/Keychains/FileVaultMaster.keychain" with administrator privileges -
Hello, I have a 2011 macbook air 1.8 i7, 4 gigs ram, with 130 gb used of the 256 available on the ssd... I installed yosemite a week ago and the filevault encryption process hasn't moved since mid last week, it is stuck at around 70% with anywhere from 2 hours to 450 days left. I have seen others on the forums having the same issue but with no answers that work so I thought I would ask in case someone with an answer hasn't seen the question.
I have tried reseting the pram and smc, verified and repaired disc permissions, gone into recovery mode and verified and repaired the different discs but none of it works. And the encryption process keeps running even when its not plugged in so I am losing upwards of 30-40% of battery an hour depending on what else I am doing.
I have also left the machine to run for over 48 hours straight over the weekend, never going to sleep and never being shut off and the process didn't progress at all. Does anyone know how I can fix this without losing any of my data, my last back up was from a few weeks ago and would like to try and save what is on here since then, if possible.
Thank-you so much for your help!Start time: 10:08:42 10/29/14
Model Identifier: MacBookAir4,2
System Version: OS X 10.10 (14A389)
Kernel Version: Darwin 14.0.0
Time since boot: 4 minutes
FileVault: On Encryption in progress: Percent completed = 7552
Diagnostic reports
2014-10-22 discoveryd crash
Log
Oct 29 10:08:26 CoreStorageGroup::completeIORequest - error 0xe00002ca detected for LVG "Macintosh HD" (UUID), pv UUID, near LV byte offset = 37661111296.
Oct 29 10:08:27 CoreStorageGroup::completeIORequest - error 0xe00002ca detected for LVG "Macintosh HD" (UUID), pv UUID, near LV byte offset = 37660131328.
Oct 29 10:08:27 CoreStorageGroup::completeIORequest - error 0xe00002ca detected for LVG "Macintosh HD" (UUID), pv UUID, near LV byte offset = 37661111296.
Oct 29 10:08:28 CoreStorageGroup::completeIORequest - error 0xe00002ca detected for LVG "Macintosh HD" (UUID), pv UUID, near LV byte offset = 37660131328.
Oct 29 10:08:28 CoreStorageGroup::completeIORequest - error 0xe00002ca detected for LVG "Macintosh HD" (UUID), pv UUID, near LV byte offset = 37661111296.
Oct 29 10:08:29 CoreStorageGroup::completeIORequest - error 0xe00002ca detected for LVG "Macintosh HD" (UUID), pv UUID, near LV byte offset = 37660131328.
Oct 29 10:08:30 CoreStorageGroup::completeIORequest - error 0xe00002ca detected for LVG "Macintosh HD" (UUID), pv UUID, near LV byte offset = 37661111296.
Oct 29 10:08:31 CoreStorageGroup::completeIORequest - error 0xe00002ca detected for LVG "Macintosh HD" (UUID), pv UUID, near LV byte offset = 37660131328.
Oct 29 10:08:31 CoreStorageGroup::completeIORequest - error 0xe00002ca detected for LVG "Macintosh HD" (UUID), pv UUID, near LV byte offset = 37661111296.
Oct 29 10:08:32 CoreStorageGroup::completeIORequest - error 0xe00002ca detected for LVG "Macintosh HD" (UUID), pv UUID, near LV byte offset = 37660131328.
Oct 29 10:08:32 CoreStorageGroup::completeIORequest - error 0xe00002ca detected for LVG "Macintosh HD" (UUID), pv UUID, near LV byte offset = 37661111296.
Oct 29 10:08:34 CoreStorageGroup::completeIORequest - error 0xe00002ca detected for LVG "Macintosh HD" (UUID), pv UUID, near LV byte offset = 37660131328.
Oct 29 10:08:34 CoreStorageGroup::completeIORequest - error 0xe00002ca detected for LVG "Macintosh HD" (UUID), pv UUID, near LV byte offset = 37661111296.
Oct 29 10:08:35 CoreStorageGroup::completeIORequest - error 0xe00002ca detected for LVG "Macintosh HD" (UUID), pv UUID, near LV byte offset = 37660131328.
Oct 29 10:08:35 CoreStorageGroup::completeIORequest - error 0xe00002ca detected for LVG "Macintosh HD" (UUID), pv UUID, near LV byte offset = 37661111296.
Oct 29 10:08:36 CoreStorageGroup::completeIORequest - error 0xe00002ca detected for LVG "Macintosh HD" (UUID), pv UUID, near LV byte offset = 37660131328.
Oct 29 10:08:36 CoreStorageGroup::completeIORequest - error 0xe00002ca detected for LVG "Macintosh HD" (UUID), pv UUID, near LV byte offset = 37661111296.
Oct 29 10:08:37 CoreStorageGroup::completeIORequest - error 0xe00002ca detected for LVG "Macintosh HD" (UUID), pv UUID, near LV byte offset = 37660131328.
Oct 29 10:08:38 CoreStorageGroup::completeIORequest - error 0xe00002ca detected for LVG "Macintosh HD" (UUID), pv UUID, near LV byte offset = 37661111296.
Oct 29 10:08:39 CoreStorageGroup::completeIORequest - error 0xe00002ca detected for LVG "Macintosh HD" (UUID), pv UUID, near LV byte offset = 37660131328.
Oct 29 10:08:39 CoreStorageGroup::completeIORequest - error 0xe00002ca detected for LVG "Macintosh HD" (UUID), pv UUID, near LV byte offset = 37661111296.
Oct 29 10:08:40 CoreStorageGroup::completeIORequest - error 0xe00002ca detected for LVG "Macintosh HD" (UUID), pv UUID, near LV byte offset = 37660131328.
Oct 29 10:08:40 CoreStorageGroup::completeIORequest - error 0xe00002ca detected for LVG "Macintosh HD" (UUID), pv UUID, near LV byte offset = 37661111296.
Oct 29 10:08:41 CoreStorageGroup::completeIORequest - error 0xe00002ca detected for LVG "Macintosh HD" (UUID), pv UUID, near LV byte offset = 37660131328.
Oct 29 10:08:41 CoreStorageGroup::completeIORequest - error 0xe00002ca detected for LVG "Macintosh HD" (UUID), pv UUID, near LV byte offset = 37661111296.
Activity
CPU: user 13%, system 14%
Daemons
com.oracle.java.JavaUpdateHelper
com.microsoft.office.licensing.helper
com.oracle.java.Helper-Tool
com.bombich.ccc.scheduledtask.UUID
com.bombich.ccc
Agents
com.equitrac.logincontroller
com.adobe.ARM.UUID
com.apple.photostream-agent
com.apple.CSConfigDotMacCert-EMAIL-SharedServices
com.oracle.java.Java-Updater
com.google.keystone.user.agent
Startup items
/Library/StartupItems/EQDRC/EQDRC
/Library/StartupItems/EQDRC/eqdrcd
/Library/StartupItems/EQDRC/StartupParameters.plist
/Library/StartupItems/EQSharedEngine/EQSharedEngine
/Library/StartupItems/EQSharedEngine/eqshengd
/Library/StartupItems/EQSharedEngine/StartupParameters.plist
Bundles
/System/Library/Extensions/EPSONUSBPrintClass.kext
- com.epson.print.kext.USBPrintClass
/System/Library/Extensions/JMicronATA.kext
- com.jmicron.JMicronATA
/Library/Internet Plug-Ins/AdobePDFViewer.plugin
- com.adobe.acrobat.pdfviewer
/Library/Internet Plug-Ins/AdobePDFViewerNPAPI.plugin
- com.adobe.acrobat.pdfviewerNPAPI
/Library/Internet Plug-Ins/Flash Player.plugin
- N/A
/Library/Internet Plug-Ins/JavaAppletPlugin.plugin
- com.oracle.java.JavaAppletPlugin
/Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin
- com.microsoft.sharepoint.browserplugin
/Library/Internet Plug-Ins/SharePointWebKitPlugin.webplugin
- com.microsoft.sharepoint.webkitplugin
/Library/Internet Plug-Ins/Silverlight.plugin
- com.microsoft.SilverlightPlugin
/Library/PreferencePanes/Flash Player.prefPane
- com.adobe.flashplayerpreferences
/Library/PreferencePanes/JavaControlPanel.prefPane
- com.oracle.java.JavaControlPanel
/Library/PreferencePanes/TeXDistPrefPane.prefPane
- comp.text.tex.distribution.preference
Library/Address Book Plug-Ins/SkypeABDialer.bundle
- com.skype.skypeabdialer
Library/Address Book Plug-Ins/SkypeABSMS.bundle
- com.skype.skypeabsms
Library/Internet Plug-Ins/Google Earth Web Plug-in.plugin
- com.Google.GoogleEarthPlugin.plugin
Library/Internet Plug-Ins/Picasa.plugin
- com.google.PicasaPlugin
Library/Services/ENService.app
- com.ThomsonResearchSoft.EndNote.ENService
Library/Spotlight/EndNote.mdimporter
- com.ThomsonResearchSoft.EndNote
Library/Widgets/Endangered Species of the Day.wdgt
- com.catalyst.widget.mnrendangeredspecies
Library/Widgets/iStat Pro.wdgt
- com.iSlayer.iStatpro4.widget
Library/Widgets/PsychWidget.wdgt
- com.spn.widget.news
Library/Widgets/Wikipedia.v1.1.0.wdgt
- com.orange.widgets.Wikipedia
Apps
/Applications/Dropbox.app
Contents of /Library/LaunchAgents/com.equitrac.logincontroller.plist (XML document text)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.equitrac.logincontroller</string>
<key>OnDemand</key>
<true/>
<key>ProgramArguments</key>
<array>
<string>/Library/Printers/Equitrac/EquitracLoginController.app/Contents/MacOS/E quitracLoginController</string>
</array>
<key>RunAtLoad</key>
<false/>
<key>WatchPaths</key>
<array>
<string>/Library/Printers/Equitrac/login/eq_launch_loginctrl.txt</string>
</array>
</dict>
</plist>
Contents of /Library/LaunchAgents/com.oracle.java.Java-Updater.plist (XML document text)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.oracle.java.Java-Updater</string>
<key>ProgramArguments</key>
<array>
<string>/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater</string>
<string>-bgcheck</string>
</array>
<key>StandardErrorPath</key>
<string>/dev/null</string>
<key>StandardOutPath</key>
<string>/dev/null</string>
<key>StartCalendarInterval</key>
<dict>
<key>Hour</key>
<integer>12</integer>
<key>Minute</key>
<integer>38</integer>
<key>Weekday</key>
<integer>6</integer>
</dict>
</dict>
...and 1 more line(s)
Contents of /Library/LaunchDaemons/com.bombich.ccc.plist (XML document text)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Disabled</key>
<false/>
<key>Label</key>
<string>com.bombich.ccc</string>
<key>OnDemand</key>
<true/>
<key>ProgramArguments</key>
<array>
<string>/Library/PrivilegedHelperTools/com.bombich.ccc</string>
</array>
<key>ServiceIPC</key>
<true/>
<key>Sockets</key>
<dict>
<key>MasterSocket</key>
<dict>
<key>SockFamily</key>
<string>Unix</string>
<key>SockPathMode</key>
<integer>438</integer>
<key>SockPathName</key>
...and 7 more line(s)
Contents of /Library/LaunchDaemons/com.bombich.ccc.scheduledtask.UUID.plist (XML document text)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Disabled</key>
<false/>
<key>Label</key>
<string>com.bombich.ccc.scheduledtask.UUID</string>
<key>OnDemand</key>
<false/>
<key>ProgramArguments</key>
<array>
<string>/Applications/Carbon Copy Cloner.app/Contents/MacOS/ccc_helper.app/Contents/MacOS/ccc_helper</string>
<string>UUID</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>ServiceDescription</key>
<string>CCC will copy the selected items from "Macintosh HD" to "BACK-UP". If you have backed up to this destination in the past, only items that have been modified since the last backup task will be copied. If you are backing up an installation of Mac OS X, CCC will make every effort to make the destination volume bootable.
• Files and folders on "BACK-UP" that are not present on "Macintosh HD" will be archived.
• Previously backed up files on "BACK-UP" will be updated only if the size or modification date differs.
• Older versions of updated files will be archived.
• CCC will not prune archive content.</string>
<key>StandardErrorPath</key>
<string>/Library/Logs/CCC.log</string>
...and 191 more line(s)
Contents of /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist (XML document text)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>MachServices</key>
<dict>
<key>com.microsoft.office.licensing.helper.port</key>
<true/>
</dict>
<key>Label</key>
<string>com.microsoft.office.licensing.helper</string>
<key>OnDemand</key>
<true/>
<key>ProgramArguments</key>
<array>
<string>/Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper</s tring>
</array>
<key>ServiceIPC</key>
<true/>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist (XML document text)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.oracle.java.Helper-Tool</string>
<key>ProgramArguments</key>
<array>
<string>/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool</string>
</array>
<key>WatchPaths</key>
<array>
<string>/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Java-Update r.plist</string>
</array>
<key>SHAuthorizationRight</key>
<string>system.preferences</string>
</dict>
</plist>
Contents of /Library/LaunchDaemons/com.oracle.java.JavaUpdateHelper.plist (XML document text)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.oracle.java.JavaUpdateHelper</string>
<key>MachServices</key>
<dict>
<key>com.oracle.java.JavaUpdateHelper</key>
<true/>
</dict>
<key>ProgramArguments</key>
<array>
<string>/Library/PrivilegedHelperTools/com.oracle.java.JavaUpdateHelper</string >
</array>
</dict>
</plist>
Contents of Library/LaunchAgents/com.adobe.ARM.UUID.plist (XML document text)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.adobe.ARM.UUID</string>
<key>ProgramArguments</key>
<array>
<string>/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartInterval</key>
<integer>12600</integer>
</dict>
</plist>
Contents of Library/LaunchAgents/com.apple.CSConfigDotMacCert-EMAIL-SharedServices.Agent.pl ist (XML document text)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>KeepAlive</key>
<false/>
<key>Label</key>
<string>com.apple.CSConfigDotMacCert-EMAIL-SharedServices</string>
<key>LimitLoadToSessionType</key>
<string>Aqua</string>
<key>LowPriorityIO</key>
<true/>
<key>Nice</key>
<integer>10</integer>
<key>ProgramArguments</key>
<array>
<string>/System/Library/Frameworks/CoreServices.framework/Frameworks/OSServices .framework/Versions/A/Support/CSConfigDotMacCert</string>
<string>-l</string>
<string>/Users/USER/Library/Logs/CSConfigDotMacCert.log</string>
<string>-u</string>
<string>EMAIL</string>
<string>-t</string>
<string>SharedServices</string>
<string>-s</string>
</array>
...and 4 more line(s)
Contents of Library/LaunchAgents/com.google.keystone.agent.plist (XML document text)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.google.keystone.user.agent</string>
<key>LimitLoadToSessionType</key>
<string>Aqua</string>
<key>ProgramArguments</key>
<array>
<string>/Users/USER/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bu ndle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftw areUpdateAgent</string>
<string>-runMode</string>
<string>ifneeded</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>StartInterval</key>
<integer>3523</integer>
<key>StandardErrorPath</key>
<string>/dev/null</string>
<key>StandardOutPath</key>
<string>/dev/null</string>
</dict>
</plist>
Bad plists
Library/Preferences/com.solidstatenetworks.awkhost.plist
Firewall: On
DNS: 64.59.135.135 (static)
Listeners
launchd: afpovertcp
launchd: afpovertcp
kdc: kerberos
User login items
Stickies
- /Applications/Stickies.app
Dropbox
- /Applications/Dropbox.app
AdobeResourceSynchronizer
- /Applications/Adobe Reader.app/Contents/Support/AdobeResourceSynchronizer.app
Hidden apps
.eclipse/com.ibm.spss.statistics.help_19/configuration/nl/en_US/org.eclipse.equ inox.app
Widgets
iStat Pro
Wikipedia.v1.1.0
PsychWidget
Endangered Species of the Day
Restricted files: 638
Elapsed time (s): 628 -
FileVault Encryption paused during setup of NEW Macbook Air. Says "Connect to power adapter to resume encryption". Kept connected to power adapter for 2 days, nothing has changed. Blue status line looks like it is complete but will not finish encryption. Why?
MacBook Air (13-inch, Early 2014)
OS X Yosemite - Version 10.10.2
1.7 GHz Intel Core i7
8 GB 1600 MHz DDR3
HD 500GB - 478GB FreeIf you don't already have a current backup of all data, back up before proceeding. There are ways to back up a computer that isn't fully functional. Ask if you need guidance.
Start up in Recovery mode. When the OS X Utilities screen appears, select Disk Utility.
In the Disk Utility window, select the icon of the startup volume from the list on the left. It will be nested below another disk icon, usually with the same name. Click the Unlock button in the toolbar. When prompted, enter the login password of a user authorized to unlock the volume, or the alternate decryption key that was generated when you activated FileVault.
Then, from the menu bar, select
File ▹ Turn Off Encryption
Enter the password again.
You can then restart as usual, if the system is working. Decryption will be completed in the background. It may take several hours, and during that time performance will be reduced.
If you can't turn off encryption in Disk Utility because the menu item is grayed out, you'll have to erase the volume and then restore the data from a backup. Select the Erase tab, and then select
Mac OS Extended (Journaled)
from the Format menu.
You can then quit to be returned to the main Recovery screen. Follow these instructions if you back up with Time Machine. If you use other backup software, follow its developer's instructions.
Don't erase the volume unless you have at least two complete, independent backups. One is not enough to be safe. -
Filevault encryption impossible
Filevault encryption impossible : message reports : impossible to create a filevault disk image.
Cloned to OSX volume to another one (i.e. bigger) to no luck.
But unfortunately (maybe the cause of it) remove a filevault certificate which reported as being out of date ???????The first try the following:
Repairing the Hard Drive and Permissions
Boot from your OS X Installer disc. After the installer loads select your language and click on the Continue button. Then select Disk Utility from the Installer menu (Utilities menu for Tiger.) After DU loads select your hard drive entry (mfgr.'s ID and drive size) from the the left side list. In the DU status area you will see an entry for the S.M.A.R.T. status of the hard drive. If it does not say "Verified" then the hard drive is failing or failed. (SMART status is not reported on external Firewire or USB drives.) If the drive is "Verified" then select your OS X volume from the list on the left (sub-entry below the drive entry,) click on the First Aid tab, then click on the Repair Disk button. If DU reports any errors that have been fixed, then re-run Repair Disk until no errors are reported. If no errors are reported click on the Repair Permissions button. Wait until the operation completes, then quit DU and return to the installer. Now shutdown the computer for a couple of minutes and then restart normally.
If DU reports errors it cannot fix, then you will need Disk Warrior (4.0 for Tiger) and/or TechTool Pro (4.5.2 for Tiger) to repair the drive. If you don't have either of them or if neither of them can fix the drive, then you will need to reformat the drive and reinstall OS X.
And double-check the size of your Home folder.
Why reward points?(Quoted from Discussions Terms of Use.)
The reward system helps to increase community participation. When a community member gives you (or another member) a reward for providing helpful advice or a solution to their question, your accumulated points will increase your status level within the community.
Members may reward you with 5 points if they deem that your reply is helpful and 10 points if you post a solution to their issue. Likewise, when you mark a reply as Helpful or Solved in your own created topic, you will be awarding the respondent with the same point values. -
Does filevault encryption work with time machine?
Filevault under Snow Leopard would allow you to encrypt data on your Mac disk but was not compatible with Time Machine i.e. you could not back it up once encrypted or restore it.
Does anyone know if this has been addressed in Lion i.e. data encrypted in Filevault is capable of being backed up to a time capsule and is recoverable using Time Machine.
The release documentation does not make this clear, although a technician led me to believe it would be fixed in Lion.According to my experience and to this -> http://support.apple.com/kb/HT1427, FileVault in Snow Leopard was compatible with Time Machine.
The thing was that, as FileVault encrypts your home folder as a disk image in 10.6, Time Machine was backing up that encrypted disk image. So
1. Time Machine could backup your home folder only when you were not logged in your user session and the computer was awake
2. with this system, you could not browse your home folder in the Time Machine incremental backups, but could only restore your complete home folder from that encrypted disk image.
In Lion, however, Filevault 2 encrypts your complete hard drive.
This means:
1. You can use Time Machine with FileVault 2 enabled in Lion (http://support.apple.com/kb/HT4811)
2. Recovery HD must be present on your computer's startup volume to use FileVault 2 (not an external Recovery HD) (http://support.apple.com/kb/HT4718)
I guess Time Machine, like it used to do with the user's home folder in 10.6, will backup your encrypted hard drive in Lion, but you will not have the ability to browse your Time Machine backup to find specific files / folders in the backup. But this backup can be used to restore your system. (http://support.apple.com/kb/HT4811)
(May someone correct me if I'm mistaken there ?)
More info about FileVault 2 in Lion -> http://support.apple.com/kb/HT4790 -
I've just installed Lion on a fresh 2TB drive in bay 4 of a 2008 Mac Pro.
Have enabled FileVault, and it says it's goimng to take over 20 hours to encrypt.
I have a single admin user account and have not added any user data or apps to this installation as yet.
Presumably then it has to encrypt the whole 2TB of the drive which is why this figure is so high?
I'd assumed before enabling it that it would just encrypt the existing installation/data (a few GB at most) and anything else as it needed to later.
I have numerous other drives attached internally/externally - i just hope it's not trying to encrypt them all.
ACAlley_Cat wrote:
Presumably you can reboot if needed and it'll continue the encryption when I next log in?
Well, looks like it, but not sure if this only applies to the boot drive.
Proceed with caution (i.e. make sure you have a backup of the data on that drive) (...or, perhaps test it on a USB drive before you re-boot)
"FileVault should finish the initial encryption of your entire hard disk within a few hours. This happens in the background, and won't interrupt normal usage of your computer. In addition to using your computer, you can sleep, log out and even turn off your computer during this time."
see: OS X Lion: About FileVault 2 -
I have a late 2009 iMac. I upgraded to Yosemite and all of that went extremely well. This week I decided to turn on Filevault. It has been running for 5 days straight and encryption has made no progress, it's stuck.
Using terminal I've entered the sudo fdesetup stratus command and for 3 days now it shows that Filevault is on, it's encrypting and is at 38.18 percent. It's stayed at 38.18 percent for 3 days now.
Researching the internet I found a couple of things to try.
Here is what I have tried to do to remedy the situation:
Restarted and held down CMD + R and then did a repair on my internal hard drive and repaired the disk permissions - This did not fix the problem. Encryption still stuck
Rebooted and cleared the PRAM. This did not fix the problem.
I'm in desperate need of help. The iMac is now unusable because anything I try to do results in endless pinwheels. PLEASE - I 'd appreciate any suggestions.Back up all data before proceeding. There are ways to back up a computer that isn't fully functional. Ask if you need guidance.
Start up in Recovery mode. When the OS X Utilities screen appears, select Disk Utility.
In the Disk Utility window, select the icon of the startup volume from the list on the left. It will be nested below another disk icon, usually with the same name. Click the Unlock button in the toolbar. When prompted, enter the login password of a user authorized to unlock the volume, or the alternate decryption key that was generated when you activated FileVault.
Then, from the menu bar, select
File ▹ Turn Off Encryption
Enter the password again.
You can then restart as usual, if the system is working. Decryption will be completed in the background. It may take several hours, and during that time performance will be reduced.
If you can't turn off encryption in Disk Utility because the menu item is grayed out, you'll have to erase the volume and then restore the data from a backup. Select the Erase tab, and then select
Mac OS Extended (Journaled)
from the Format menu.
You can then quit to be returned to the main Recovery screen. Follow these instructions if you back up with Time Machine. If you use other backup software, follow its developer's instructions.
Don't erase the volume unless you have at least two complete, independent backups. One is not enough to be safe. -
Filevault encryption: no security questions, no recovery code; how to revert?
Running the latest Yosemite (10.10.2) on an iMac (upgraded from Mavericks) ...
I decided I wanted to encrypt the boot drive on our iMac, so I clicked to turn on Filevault. Here's what happened:
I was NOT offered a recovery key. (As this point, I didn't know when the key is normally offered.)
I DID get a window that asked if I wanted Apple to save my key, and I clicked on the radio button to do so. Then I clicked on CONTINUE.
I did NOT get any security questions to answer, just a RESTART button. I thought, maybe the security questions come after the restart.
I clicked on RESTART and the iMac restarted and encrypted the drive (17 hours).
Concerned that I didn't have a recovery key, I read up on the forums. Sounded like if I simply used my user password, I could turn off Filevault to decrypt the drive, and I'd be back to where I started. I did so, and watched as it decrypted the drive (6 hours). Filevault indicates that is is "now off."
I thought I'd try again, so I clicked to turn on Filevault. This time, I did NOT get a recovery key (same as before) and I did NOT get the window asking if I wanted Apple to save my key — only an immediate RESTART button. I canceled.
I restarted the iMac, noting that the startup graphics were different — the iMac now starts immediately with an all-white screen, something that one forum participant said is evidence that your boot drive IS encrypted regardless of what Filevault says.
This concerned me because it now seemed like the drive might be encrypted and I had no recovery key and hadn't been asked any security questions.
I thought if I turned on Filevault I could generate a fresh recovery key that would supplant anything Apple was storing for me — and give me a chance to answer security questions.
I turned on Filevault and was, for the third time, NOT offered a recovery key but this time I DID get the window that asked if I wanted Apple to save my key. Apparently the restart at least added this screen. I cancelled.
So while Filevault says it is off, the immediate white start-up screen suggests the drive may be encrypted. Regardless, Filevault is not offering a recovery key or security questions.
I have sketchy ideas about how to rectify things:
I could start up from an external backup (unencrypted) of the boot drive, erase the boot drive, and clone the backup to the boot drive. Will that create a bootable (non-encrypted) startup drive? I don't think so ...
I could start up from the external backup (unencrypted) of the boot drive, erase the boot drive, then do a clean install of Yosemite on the boot drive. Would that clear any existing encryption? I don't know ...
Or I read about using Terminal to un-encrypt a drive?
Any advice would be much appreciated.
Thanks,
BradleyClick here for information. If you can't get the answers emailed to you for some reason, contact the iTunes Store staff via the link in that article.
(80111) -
FileVault Encryption STUCK after Yosemite upgrade
This is my problem. It stuck forever at 87%. How to revert back because I do not want to turn on FileVault. Below its a copy of my current status:
Last login: Fri Oct 17 21:14:47 on ttys000
Abraham-Sudirmans-MacBook-Air:~ abrahamsudirman$ { diskutil list; echo; diskutil cs list; } | pbcopy
Abraham-Sudirmans-MacBook-Air:~ abrahamsudirman$
Abraham-Sudirmans-MacBook-Air:~ abrahamsudirman$ diskutil cs list
CoreStorage logical volume groups (1 found)
|
+-- Logical Volume Group 5C247BD5-FFE2-4747-91D6-4F4FE540AEBD
=========================================================
Name: Macintosh HD
Status: Online
Size: 250140434432 B (250.1 GB)
Free Space: 35651584 B (35.7 MB)
|
+-< Physical Volume 47E85974-7538-423D-B09D-C63DFCECD4EC
| ----------------------------------------------------
| Index: 0
| Disk: disk0s2
| Status: Online
| Size: 250140434432 B (250.1 GB)
|
+-> Logical Volume Family 957B1352-B7F8-4A30-BA3B-BC16F4376738
Encryption Status: Unlocked
Encryption Type: AES-XTS
Conversion Status: Converting
Conversion Direction: forward
Has Encrypted Extents: Yes
Fully Secure: No
Passphrase Required: Yes
|
+-> Logical Volume E9E61154-EB93-4E25-9BB0-244B9E2FA6A9
Disk: disk1
Status: Online
Size (Total): 249769230336 B (249.8 GB)
Conversion Progress: 87%
Revertible: No
LV Name: Macintosh HD
Volume Name: Macintosh HD
Content Hint: Apple_HFS
Abraham-Sudirmans-MacBook-Air:~ abrahamsudirman$
Thank you in advance. Please help me out.First, I would suggest booting into the Recovery Partition and running Repair Disk from the Disk Utility.
Core Storage may be put on to your computer by the Yosemite installer, but the use of File Vault is optional and can be unchecked during the installation. To revert the disk and remove the Logical Volume:
In the Terminal app copy/paste
diskutil cs list
Then look for the disk identifier of the logical volume itself (not the physical), which should be "disk1" or "disk2"
Then to remove the logical volume:
diskutil cs revert “yourdiskname'
In this case, that was:
diskutil cs revert disk1
If you want to re-install Core Storage:
diskutil list
then
diskutil cs convert disk0s2 (or such) -
Has anyone found a solution to fixing the FileVault "encryption paused" error?
I got my Macbook Air in mid January 2015. When I set it up I decided to enable FileVault but after a few minutes the encryption failed and now it will not continue and complete, even when I have my computer on and plugged in. I have seen many different possible solutions, but none that really worked well. Has anyone found a good solution to the issue?
Back up all data before proceeding. There are ways to back up a computer that isn't fully functional. Ask if you need guidance.
Start up in Recovery mode. When the OS X Utilities screen appears, select Disk Utility.
In the Disk Utility window, select the icon of the startup volume from the list on the left. It will be nested below another disk icon, usually with the same name. Click the Unlock button in the toolbar. When prompted, enter the login password of a user authorized to unlock the volume, or the alternate decryption key that was generated when you activated FileVault.
Then, from the menu bar, select
File ▹ Turn Off Encryption
Enter the password again.
You can then restart as usual, if the system is working. Decryption will be completed in the background. It may take several hours, and during that time performance will be reduced.
If you can't turn off encryption in Disk Utility because the menu item is grayed out, you'll have to erase the volume and then restore the data from a backup. Select the Erase tab, and then select
Mac OS Extended (Journaled)
from the Format menu.
You can then quit to be returned to the main Recovery screen. Follow these instructions if you back up with Time Machine. If you use other backup software, follow its developer's instructions.
Don't erase the volume unless you have at least two complete, independent backups. One is not enough to be safe. -
Does FileVault encrypt my files sent to a cloud storage
If I am using FileVault on Macbook Pro are my files encrypted when uploaded to a cloud storage service such as JustCloud, DropBox or SpiderOak?
Just Cloud is a commercial cloud backup that is really a bait and switch scheme - stay away from just Cloud
LN -
Filevault Encryption for Moved Home Directory and External Hard Drive
This posting consists of two different, yet associated, questions.
Here is my relevant equipment:
MacBook Pro
Micronet Platinum RAID Pro, 2.5 terabytes (uses: video editing, backup)
LaCie Rugged All-Terrain Hard Disk, 160 gigabytes (use: additional storage for MacBook)
*Question 1:*
I currently use FileVault to encrypt my Home directory on my MacBook Pro. However, I am running out of hard drive space, given that I do a lot of work with film and have a lot of large applications such as Final Cut Studio 2 and Creative Suite 3 Master Collection fully installed and taking up a lot of space.
Hence, I need to move my Home directory to an external hard drive to free up a nice amount of space, and I would like to keep the applications on the Macintosh hard drive to ensure that they run optimally (though the Lacie drive does use FireWire 800, so perhaps it would not matter?). +Leaving my Home directory unencrypted is not an option.+
Question: If I use the Advanced Options for my Account within Mac OS X 10.5 Leopard (Apple menu > System Preferences > Accounts > (right click) Advanced Options...) to change the location of my Home directory to the Lacie external hard drive, will FileVault still encrypt my Home directory at this new location?
*Question 2*
In the past, FileVault would not encrypt data on external hard drives—only data within a Home directory.
Of course, I understand that there are many ways to eschew this limitation of FileVault (e.g., create a secure image with Disk Utility, use third-party software, et cetera). Still, it would be nice to have this functionality built right into the Mac OS as part of FileVault, for ease, reliability, and so on.
Question: With Mac OS X 10.5 Leopard, is there now any way to use FileVault to encrypt files other than those within the Home directory? That is, any files that I drop into the Lacie hard drive (for simplicity, let’s assume outside of the Home directory option I asked about above in the first question) would be encrypted by FileVault.
Thanks.More information.
Home Folder - Move
Maybe you are looking for
-
How does FCP Pro X manage free frames?
I see that adding a freeze frame has been restored in v10.1.2 - I wonder what happened there? Now that the menu entry is back again I have created a freeze frame. FCP assumes that I want to use it where it is in the timeline - freezing the action.
-
Although i was sold a product with "global guarantee" i takes 4 month to this company to repair a hard disk for a new product (bought in feb 2012). Of course they never say this when you are buying the product.
-
Imovie hd 6 crashes - Bad Access- libSystem.B.dylib
imovie HD 6 crashes on start up. I have verified the disk, the permissions and checked the memory to no avail. I even re-installed the software for the application. Pls help. Exception: EXCBADACCESS (0x0001) Codes: KERNPROTECTIONFAILURE (0x0002) at 0
-
How to upgrade java version in Oracle 11g 11.2.0.1
The java version of my oracle database is 1.5.0_10. How do I upgrade it to java 1.7.0_10 Thanks
-
Hello. On my System, Photoshop 7.0..1 crashes on startup; I'll spare you the details, only this: the crash report says: Application Specific Information: * error for object 0x10734d208: incorrect checksum for freed object - object was probably modifi