Take the 2-minute tour ×
Ask Different is a question and answer site for power users of Apple hardware and software. It's 100% free, no registration required.

Since my primary hard disk is encrypted with FileVault2, I also wanted my backup drive to be encrypted. I plugged in my external drive, brought up Disk Utility, and went to erase/format the disk. I chose Mac OS X Extended (Journaled, Encrptyed). However, I couldn't find out what kind of encryption it uses. Does anyone know (and/or know how I would look this info up via a command or system utility)? Is it the same as FileVault2?

share|improve this question

1 Answer 1

up vote 5 down vote accepted

Yes - it's the same whole disk encryption. In both instances you end up with a volume wrapper and key storage to unlocks the encrypted file system where the data is safely stored. Disk Utility is a bit of a chore to set up encryption of an external drive, so I usually just wipe the drive and set it for Backups and then tell Time Machine to encrypt the drive. It handles the formatting, generating the crypto keys and lets you choose a passphrase to unlock the keys.

You can use diskutil cs list from the command line (in terminal.app) to show the encryption status and details. There's nothing wrong with disk utility other than the steps involved to reach an equivalent drive setup.

Here is what a fully encrypted and locked USB drive looks like when you set up Time Machine and instruct it to encrypt backups to an external drive:

Air:~ bmike$ diskutil cs list
CoreStorage logical volume groups (1 found)
|
+-- Logical Volume Group 6FD6879D-EFBF-4F33-9FC2-13E32A0F7B28
    =========================================================
    Name:         Backups
    Status:       Online
    Size:         499730309120 B (499.7 GB)
    Free Space:   0 B (0 B)
    |
    +-< Physical Volume 3082BFED-D84E-48FA-AB4F-7FB0197FD653
    |   ----------------------------------------------------
    |   Index:    0
    |   Disk:     disk1s2
    |   Status:   Online
    |   Size:     499730309120 B (499.7 GB)
    |
    +-> Logical Volume Family DFD4DEB4-93A8-4DD5-8F73-6534AB408E4D
        ----------------------------------------------------------
        Encryption Status:       Locked
        Encryption Type:         AES-XTS
        Conversion Status:       Complete
        Conversion Direction:    -none-
        Has Encrypted Extents:   Yes
        Fully Secure:            Yes
        Passphrase Required:     Yes
        |
        +-> Logical Volume E9497C5B-4AAD-46E5-ACEE-4214D1CA11D8
            ---------------------------------------------------
            Disk:               -none-
            Status:             Locked
            Size (Total):       499411537920 B (499.4 GB)
            Size (Converted):   -none-
            Revertible:         Yes (unlock and decryption required)
            LV Name:            Backups
            Content Hint:       Apple_HFS
share|improve this answer
1  
Could you please elaborate when you say ... Disk Utility isn't a good way to encrypt an external drive... (for purpose of using it for TimeMachine there?) –  polocanada Sep 20 at 19:18
    
@polocanada good catch. It's fine / equivalent but just not speedy and one-click. I'll edit the answer to clarify. –  bmike Sep 21 at 19:22

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.