Réparez vos affaires Communauté Boutique

A1418 / EMC 3069 / 2017 / Processeur quadricoeur i5 à 3,0 GHz, quadricoeur i5 à 3,4 GHz ou quadricoeur i7 de 3,6GHz. Sorti le 8 Juin 2017.

175 questions Voir tout

Options

How to encrypt non-boot Volume so available at login?

Hi folks - this follows from my original hardware question Looking for the definitive answer on upgrading my Mac. Good news is the hardware upgrade and Big Sur clean install all went very well.

I now have a 240GB blade SSD as the Mac boot volume with Admin account, and a second 1TB SATA SSD as my Data volume for my regular user account and home folder.

Where I’m stuck now before getting too far restoring data… is it still possible to encrypt the SATA SSD using FileVault or similar, such that drive contents are encrypted until login? It seems FileVault only supports the boot volume which is the blade only, and I tried creating an encrypted volume on the SATA but is does not automatically decrypt at login and login then fails.

Seems this would be a fairly common use case especially for the higher end machines with multiple physical storage drives.

Is there a simple way through this? Potentially I could recreate the Fusion set combining the 2 SSDs but understand that is a bad idea from performance and reliability POV (one drive dies and it all becomes inaccessible).

Thanks much

Répondu ! Afficher la réponse J'ai le même problème

Cette question est-elle utile ?

Oui Non
Indice 0
Ajouter un commentaire

2 Réponses

Filtrer par :
Les plus utiles Les plus récentes Les plus ancien(ne)s
Solution retenue

Options

For the record books, here is where I landed.

After not being able to find a simple way to reenable FileVault or similar encryption on my Data Drive, I opted to refuse the 2 SSD’s per the simple steps here. Note there is a lot of outdated information elsewhere on refusing drives per older OS versions. As of BigSur and Nov 2020, these worked perfectly for me and took about 60 seconds to complete.

While there is a lot of discussion online why technically this may not yield absolute maximum drive performance, so far practically it has been plenty fast for my purposes and far simpler in terms of leaving things where Mac OS expects them (on the boot drive), thus allowing things like:

  • Simple reactivation of FileVault on the full volume
  • Full use of the combined 1.24TB of the 2 SSD’s
  • No monkeying around with advanced user settings to relocate the User Home folder.

Hope others find it useful.

djd

Block Image

Block Image

Cette réponse est-elle utile ?

Oui Non
Indice 0
Ajouter un commentaire

Options

Did you add the Admin Blade drive user account to the SATA drive as well as add the SATA user account to the Blade drive?

Cette réponse est-elle utile ?

Oui Non
Indice 0

5 commentaires:

No, what would that entail?

Steps I took were:

1. Create the admin user with the initial Big Sur install.

2. add my standard account while logged in as admin.

3. Steps here to point the standard users home folder to the SATA SSD. https://www.idownloadblog.com/2017/01/25...

When I point to APFS non encrypted volume it logs in no problem.

But when I tried encrypting the APFS volume the login times out with a generic error after 30 seconds or so.

Am I missing a step?

par

Click on the drive icon then right click to get to the Get Info menu. at the very bottom is the Sharing and Permissions options for the drive. Add the users.

par

Tried that now but no impact and not sure the permissions are the issue TBH. Issue is the Data Volume itself is encrypted and unmounted at initial boot up. Trying to login to the user profile on that device fails, until I login as admin on the blade, enter the data volume password to decrypt and mount it, then logout and back in as the main account. Super clunky and not convinced MacOS will be happy with that in the long run.

par

OK, then the last thing I can think of is to use the Automator to create a login script.

I don't personally use drive encryption, it's been awhile I've used where I has worked when they used it.

par

Ok, thanks for all your input Dan.

par

Ajouter un commentaire

Ajouter une réponse

davidduran sera éternellement reconnaissant.
Nombre de vues :

Dernières 24 heures : 0

7 derniers jours : 0

30 derniers jours : 1

Total : 111