Re: [Fed-Talk] some observations on Lion Server and whole-disk encryption
Re: [Fed-Talk] some observations on Lion Server and whole-disk encryption
- Subject: Re: [Fed-Talk] some observations on Lion Server and whole-disk encryption
- From: "Trouton, Rich R" <email@hidden>
- Date: Fri, 06 Jan 2012 16:41:43 +0000
- Thread-topic: [Fed-Talk] some observations on Lion Server and whole-disk encryption
To follow up on Dave's email, I've posted an entry about how to encrypt and decrypt 10.7 non-boot volumes without erasing them:
http://derflounder.wordpress.com/2012/01/06/encrypting-10-7-non-boot-volumes-without-erasing-them/
One thing that's important to know is that, unlike a FileVault 2-encrypted boot volume, there isn't a separate recovery key for drives encrypted using this method. Having the passphrase is the only way to unlock the encryption.
Thanks,
Rich
On Jan 4, 2012, at 12:51 PM, David Emery wrote:
> Yup, there is a better way to encrypt drives with data.... I haven't tried this yet (and in particular I wonder if there's a problem encrypting a disk that's more than 50% full, which there is with FileVault 1.)
>
> dave
>
> Begin forwarded message:
>
>> From: "Link, Peter R." <email@hidden>
>> Date: January 4, 2012 12:45:43 PM EST
>> To: David Emery <email@hidden>
>> Subject: Re: [Fed-Talk] some observations on Lion Server and whole-disk encryption
>>
>> I went back through my notes and found I reformatted my backup drive with the encrypted setting before copying to it (using Disk Utility). I found this article, http://www.macworld.com/article/162999-2/2011/10/complete_guide_to_filevault_2_in_lion.html, that talks about using the command line to encrypt external drives with data on them. I have a spare drive with data on it I could try to see how well this works.
>>
>> I saved this website because it actually has a lot of good command line information I can use.
>>
>>
>> Peter Link
>> Cyber Security Analyst
>> Cyber Security Program
>> Lawrence Livermore National Laboratory
>> PO Box 808, L-315
>> Livermore, CA 94550
>> email@hidden
>
> -----
> David Emery, 703 298 3473 (c) 703 272 7496 (fax)
> Supporting PdM Software Integration
>
>
>
>
> _______________________________________________
> Do not post admin requests to the list. They will be ignored.
> Fed-talk mailing list (email@hidden)
> Help/Unsubscribe/Update your Subscription:
>
> This email sent to email@hidden
---
Rich Trouton
email@hidden
JFRC Help Desk
phone: x4030
email: email@hidden
The best way to get in touch with me is through email.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden