Carbon Copy Cloner Encrypted Backup

Posted on  by admin

If your goal is to create a bootable, encrypted backup, use the following procedure: Follow CCC's documentation to properly format the destination volume. Do not format the volume as encrypted. Use CCC to back up your startup disk to the unencrypted destination volume.

Tags

backup, linux, mac, organization, osx, tech, yosemite

UPDATE 2017-09-21: What follows is my workable but convoluted system for securing sensitive files in Dropbox. As an alternative, you may instead consider a zero-knowledge, encrypted backup service like SpiderOak. Easier. -JMT

Carbon Copy Cloner Trial

  1. The problem is not specific to the backup volume that you would like to restore from, rather Disk Utility only fails when the current startup disk is encrypted. If you can boot your Mac from another non-encrypted startup disk, you can restore your encrypted backup volume to the internal disk of your T2 Mac.
  2. Run the installer, choosing the external clone disk as the target. This will automatically create a new Recovery HD partition associated with the target disk. Reboot from the external disk. Hold down option key during startup to select the boot disk.

There comes a time in every man’s life when he realizes that it’s totally not smart to keep sensitive personal documents in plain text on Dropbox.

For me, that time was last Monday. I spent this week searching for and experimenting with possible solutions, and I’ve now got a system in place that I’m pretty happy with, so I thought I’d share.
The problem, as I see it, is that the important stuff needs off-site backup — but the important stuff tends to be the same as the sensitive stuff, so it’s exactly the stuff that shouldn’t just be sitting on Dropbox. (Yes, I know Dropbox encrypts your data already. If that’s enough for you, more power to you.)

Cloner

The system I’ve set up on my OS X Yosemite machine is this:

  1. Create a folder in ~/Documents called Encrypted. Collect all my important stuff there.
  2. Use VeraCrypt (free) to create an encrypted volume; we’ll call it EncryptedVolume.
  3. Use Carbon Copy Cloner ($40; worth it) to clone ~/Documents/Encrypted to EncryptedVolume.
  4. Place EncryptedVolume in ~/Dropbox.

Now you can just use your ~/Documents/Encrypted folder on an ongoing basis, and you don’t have to fool with opening encrypted volumes or anything else when you’re in a rush. Just use the folder as normal. And when you do have time, and/or you make important updates, use Carbon Copy Cloner to re-sync the folder to EncryptedVolume. CCC will only copy the updates, Dropbox will only upload the file difference, and nothing will be uploaded until the drive is encrypted and unmounted again. So everything is both efficient and secure during each step.

That’s the best compromise I could find between convenience and security. I chose VeraCrypt both because it’s open source and because it’s available for Windows, Mac and Linux. So if my computing situation changes and I’m ever in a pinch, I can open my encrypted documents on any computer* (I also chose to format EncryptedVolume as FAT for the same reason).

Of course, you can do this without CCC, as long as you don’t mind a little manual housekeeping. But CCC is already the bedrock of my backup solution, so it made sense to leverage it here, too.

Carbon Copy Cloner Mac Os X

Carbon Copy Cloner Encrypted Backup

Carbon Copy Cloner Reviews

*I had one hiccup on Linux — after Dropbox syncs EncryptedVolume to your Linux box, you need to give yourself write permission to the file, or the drive will be mounted read-only. You only need to do this once, the first time it downloads.

Update: Despite having made no changes (except as described above), the issue appears to have resolved itself – I can now boot from my laptop's hard drive with no problems, and from my external drive with no problems other than a short (<30 second) delay. Given that the external hard drive is now decrypted but still pauses during the booting process at the same place as before, the issue likely had to do with the OS startup files rather than decryption, but I'm not going to complain as long as it keeps working. 'If it ain't broke...'

Carbon Copy Cloner Encrypted Bootable Backup

Apr 14, 2016 12:12 PM