Encrypt Time Machine and Time Capsule backups
Posted on 10. Sep, 2008 by jason in tech
Today at work we got a Time Capsule for everyone’s backups. While this may not be the best answer for a company back up solution, it’s still better than what most companies I’ve worked for have for backup solutions (read nothing). With the the Time Capsule in plain sight of the glass door, and everyone’s files saved on them, it would be pretty easy for someone to break in, unplug it, and have a copy of every file on everyone’s computer. To solve this problem you can encrypt your time machine backups. How do I do that you ask? Well, use Apple’s fancy built in feature to. Encrypt the sparsebundle images.
- Set up Time Machine to back up to an AFP drive. I don’t think this will work with a local hard drive.
- Let Time Machine start backing up, then stop the back up. This will have created <machine_name>_<mac_address>.sparsebundle on the AFP drive.
- Disable Time Machine.
- Open a Terminal and run these commands:
$ cd /Volumes/<AFP Drive>/
$ mv name_mac.sparsebundle name_mac-old.sparsebundle
$ hdiutil convert -format UDSB -o name_mac.sparsebundle -encryption AES-256 name_mac-old.sparsebundle
It will ask you for a password. Type in a password you won’t forget. - Double click the sparsebundle in the GUI. You will be prompted for your password. Type that in and tick the “Remember password” check box.
- Open /Applications/Utilities/Keychain Access and find name_mac.sparsebundle. Right click it and select Copy name_mac.sparsebundle.
- Select System Keychain on the left hand side of Keychain Access and paste it in the main area. Allow this action if you are asked. Remember to lock the System Keychain when you are done.
- Time Machine should not have no problem backing up to the encrypted volume. If everything works as planned, feel free to delete the name_mac-old.sparsebundle
Your backups are now encrypted.
When you need to restore, make a temporary account when you reinstall, and then decrypt the sparsebundle.
Now that you’re all secure, don’t forget those passwords.
