Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

kevs1

macrumors regular
Original poster
Mar 20, 2016
140
7
I have an external drive partitioned into 1) data and 2) the Mac OS. The mac os also has some data files. The 1) data drive encrypts fine. When I right click to encrypt the 2) Mac os drive is says " A Recovery system for the targeted disk is required" and then wont encrypt.
 

DeltaMac

macrumors G5
Jul 30, 2003
13,757
4,583
Delaware
Is there a question there?
File Vault expects that a bootable OS X partition will have a Recovery system installed, too.
You can encrypt the system partition (with File Vault), if there is a Recovery system partition on that same drive.
That's what the message means.

This page would help, too.
 

kevs1

macrumors regular
Original poster
Mar 20, 2016
140
7
Thanks Delta, I'm using File Vault. It's just an external drive partition, I right click and choose encrypt. I've done it before, so I'm puzzled. Maybe this is a new rule? As far as recovery system, oh.. I'm on super duper and it does not have the recovery on it's clones.
I actually don't care about encrypting the system on that partition, just one date folder on it I'd like to encrypt, but I dont think you can encrypt folders...?

The create recovery partition is a nice link, but this is just a clone I'm taking offsite for backup, no need for all that.
 

NoBoMac

Moderator
Staff member
Jul 1, 2014
6,287
4,974
The requirement has always been there, hence, I don't encrypt my SuperDuper! main drive clones.

You can use some third party freeware to encrypt the folder. Or what I do, just delete the user account from the clone, keep a separate admin account that is devoid of anything, and keep my data backed up via TimeMachine and manual backups. The last two can be FileVault encrypted, and the clone becomes an emergency boot option to recover/restore the machine OS.

Or, just delete the folder in question and recover it from TM when needed.
 
  • Like
Reactions: kevs1

Weaselboy

Moderator
Staff member
Jan 23, 2005
34,482
16,197
California
I actually don't care about encrypting the system on that partition, just one date folder on it I'd like to encrypt, but I dont think you can encrypt folders...?

Just use Disk Utility to make an encrypted sparse bundle image then put the data you want inside that encrypted image.

https://support.apple.com/en-us/HT201599
 

kevs1

macrumors regular
Original poster
Mar 20, 2016
140
7
No Bo / Weasel, thanks, neither of those ideas works as this is an off site backup, so I need to have one offsite bootable backup. The only issue I guess is for the first time, buying the new 27" I'm putting Data on the Mac HD, So in the past, I never did that. I always left the Mac HD pure so never saw this before. I can't make a spare drive for the data as I use it too much on a daily basis and cannot be encumbered.

What is a good 3rd party app that can encrypt the drive? Maybe that is the best solution, or consider bailing on SD for CCC. Though I like SD for a long time. It's off site, and the odds on anyone getting to it is rare.

Also have this idea: Maybe before taking it off site, and then again when bringing back, just move the data from the OS drive to the data drive. pita.
 

NoBoMac

Moderator
Staff member
Jul 1, 2014
6,287
4,974
Weaselboy's suggestion re: encrypted sparse bundle will work for your needs, if I'm understanding the situation.

The drive is still bootable, the data you want to protect is protected. Only pita is that need to mount that bundle for first use of the day.
 
  • Like
Reactions: Weaselboy and kevs1

Weaselboy

Moderator
Staff member
Jan 23, 2005
34,482
16,197
California
Weaselboy's suggestion re: encrypted sparse bundle will work for your needs, if I'm understanding the situation.

The drive is still bootable, the data you want to protect is protected. Only pita is that need to mount that bundle for first use of the day.
Yes... what I had in mind was say if OP wanted to protect everything in the Documents folder. Just make an encrypted sparse bundle image and put it in the Documents folder, then drop the entire contents of that folder inside the encrypted image. So you could still boot to the cloned drive then just open the encrypted image to access the documents.
 
  • Like
Reactions: kevs1

kevs1

macrumors regular
Original poster
Mar 20, 2016
140
7
Thanks wrote SD, and they said just boot into the backup clone, install the OS fresh, then it will have recovery, encrypt, and the smart update wont overwrite the recovery drive -- if I have that correct. I don't have time today to test that before taking it offsite, but may later...
 
  • Like
Reactions: NoBoMac

Weaselboy

Moderator
Staff member
Jan 23, 2005
34,482
16,197
California
Thanks wrote SD, and they said just boot into the backup clone, install the OS fresh, then it will have recovery, encrypt, and the smart update wont overwrite the recovery drive -- if I have that correct. I don't have time today to test that before taking it offsite, but may later...
Yep... that would work. Just to be clear though, "install fresh" normally implies erasing the drive and then reinstalling the OS, and you don't want that. If you just boot to that volume the DL and install the OS it will create a recovery partition for you, then you will be able to enable FV2 while booted to that volume.
 
  • Like
Reactions: kevs1

kevs1

macrumors regular
Original poster
Mar 20, 2016
140
7
The info I got was to reboot from clone, go to app store, download OS, encrypt, and it's a one time thing.

So: I would need to do smart update? And that's where I would think the new recovery would disappear and get overwritten, no? I have not heard a response back from them yet.
 

Weaselboy

Moderator
Staff member
Jan 23, 2005
34,482
16,197
California
The info I got was to reboot from clone, go to app store, download OS, encrypt, and it's a one time thing.

So: I would need to do smart update? And that's where I would think the new recovery would disappear and get overwritten, no? I have not heard a response back from them yet.

I think you are on track. Yes.. just boot to the clone, DL the OS and install it. Then when it reboots after the OSD install, turn on FileVault and wait for it to encrypt. No need to update after that. The ODS install will the latest 10.11.5 version.

Subsequent SD updates should not disturb the recovery partition.
 
  • Like
Reactions: NoBoMac and kevs1

kevs1

macrumors regular
Original poster
Mar 20, 2016
140
7
Thanks Weasle, I never used File Vault, I just do the right click, encrypt this drive, ok? same?
What is OSD, and DL stand for?

Would that even work with scheduled smart updates? Are you on Super Duper as well?
 
  • Like
Reactions: Weaselboy

Weaselboy

Moderator
Staff member
Jan 23, 2005
34,482
16,197
California
Thanks Weasle, I never used File Vault, I just do the right click, encrypt this drive, ok? same?
What is OSD, and DL stand for?

Would that even work with scheduled smart updates? Are you on Super Duper as well?

You don't want to just right click and encrypt, because then you would not be able to boot to the drive. You need to boot to the drive after you update the operating system (OS << not OSD I cannot type!), then turn in FileVault in System Preferences. This uses that same technology as if you had right clicked, but sets the system up so you can boot to the disk

Sorry... OS is operating system and DL is download.

SuperDuper will still work, with one problem. If you have this disk attached as an external, you will need to first double click the volume in Finder then "unlock" the disk for SD to be able to write to the volume.

I don't use SD, but rather Carbon Copy Cloner due to this recovery partition business. I'm frankly surprised SD has not updated their app to handle this yet.
 

kevs1

macrumors regular
Original poster
Mar 20, 2016
140
7
Thanks Weasel, well being that this is a drive I take offsite and on again every 3 months , I could live with that. But this scenario could not work for daily schedule backups? For those I'm in my house and don't use encryption. I think the word is that SD would have done recovery by now, but they don't know how ( I suppose) and is not going to do it in future but who knows? I'm still hanging with them as I have been with them so long and am a loyal guy!
 

Weaselboy

Moderator
Staff member
Jan 23, 2005
34,482
16,197
California
Thanks Weasel, well being that this is a drive I take offsite and on again every 3 months , I could live with that. But this scenario could not work for daily schedule backups?

Are you keeping the drive attached all the time? If you do, you only have to mount and unlock once then it stays that way and your daily backups would keep on working until you eject the encrypted volume.
 

kevs1

macrumors regular
Original poster
Mar 20, 2016
140
7
No this one is off site all the time, then comes home once every 3 months, and I smart update and take away- hence I can live with the file vault thing.

The other drives that stay in house are attached all the time..
 
  • Like
Reactions: Weaselboy
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.