MAC OS X Essentials 10.13 Lesson 11- Manage File Systems and Storage, Lesson 12- FileVault

What devices can read and write storage devices formatted as APFS?

* Devices formatted as Mac OS Extended (if OS is running HIgh Sierra) or other devices formatted as APFS file system can be read from and written to by devices formatted as APFS. * Devices formatted as APFS: > Other devices formaatted as APFS > Devices formatted as MAC OS EXtended if using macOS High Sierra

A user cannot log in after the FileVault is enabled. What is the cause? How can you fix this?

*** Cause 1: It could be due to migration from FileVault 1 to FileVault 2. Fix 1: 1. Log in as your backup admin account (you may need to make such an account). Lets assume that the FileVault "migrated" (or Time Machine "restored") account is called "Bob" 2. Open System Preferences, then Users 3. Delete Bob's account (ie the user account you cannot log into) DO NOT DELETE THE HOME FOLDER. Choose "Leave the Home Folder alone" 4. Re-Create Bob (ie a User account with the same details as the one you trashed in step 3). 5. Open a terminal window. "sudo bash" Ignore the warning. "cd Users" "mv Bob Bob_fresh" "mv Bob\ (Deleted) Bob" 6. Try to login as Bob, if it works, you can delete the "Bob_fresh" directory, you are done! Reference: https://discussions.apple.com/thread/2449570 *** Cause 2: A macOS Computer which was updated to High Sierra 10.13 while not connected to the Active Directory domain and in AD Mobile Account mode could possible cuase the user to be unable to login to the Active Directory domain. Fix 2: When upgrading a Computer that will be connected to AD in the future to macOS X High Sierra, ensure that a local admin account is created and also that FileVault is turned off. In order to let the Computer joine the AD domain, have the user login to the Computer using the local admin account. Connect the Computer to the AD domain Network using an Ethernet wired connection, or through a VPN Connection if user is connected remotely. Once connected to the network, turn on FileVault in order for the new password to be set. Also the local admin has to create a new KeyChain in order to prevent annoying pop-ups asking for old password. Reference: https://www.jamf.com/jamf-nation/discussions/25499/macos-high-sierra-10-13-issues-with-ad-and-password-changes ***

What file types are supported by OS X with both write and read features?

1. APFS - This is the type of Volume used in Mac OS X High Sierra when it is installed in a Solid State Drive (SSD) storage media and other flash based staorage device. APFS supports advanced features required by macOS. Its main benefit is security improvement and second is performance improvement. Other features of APFS includes support for Unicode filenames, rich metadata, Portable Operating System Interface (POSIX) permissions, access control lists, UNIX-style links, and aliases. Some macOS X users do not prefer to migrate to APFS due to issues such as encryption. Its possible that users can get locked from their storage due to encryption issue. Other APFS variations such as APFS (Encrypted), APFS (Case-sensitive), and APFS (Case-sensitive, Encrypted) also has write and read features to macOS X operating system volumes. 2. Mac OS Extended and its variations - (Mac OS Extended (Case- Sensitive), Mac OS Extended (Journaled), Mac OS Extended (Case- Sensitive, Journaled, Encrypted) also known as HFS Plus are able to read and write to macOS X operating System Volumes). 3. File Allocation Table (FAT) - is the legacy volume format used by Windows PCs and by many peripherals. This format has evolved over the years, with each progressive version supporting larger volumes: FAT12, FAT16, and FAT32. Apple Boot Camp supports running Windows 7 or newer from a FAT32 volume, but macOS itself cannot start up from such a volume. 4. Extended File Allocation Table (ExFAT) - created specifically for large flash storage disks, ExFAT basically extends the legacy FAT architecture to support disks larger than 32 GB. Many flash-based digital camcorders use ExFAT to support the large storage volumes required for high-definition video.

What partition schemes are supported by OS X?

1. GUID Partition Map (GPT) - This is the default partition scheme used by Mac computers. It is also the only partition scheme supported for Mac computers to start up using disk-based storage. 2. Apple Partition Map (APM) - This is the default partition scheme used by previous PowerPC-based Mac computers. 3. Master Boot Record (MBR) - This is the default partition scheme used by most non-Mac computers, including Windows-compatible PCs. This partition scheme is commonly used by peripherals that store to flash memory.

When is APFS automatically applied to the storage devices?

APFS type volume is applied by macOS X if the operating system detects an SSD type storage media during installation or upgrade to mac OS X High Sierra. The operating system will not automatically change volume type in scenarios other than described above.

What is Core Storage, and what two major macOS features are implemented via Core Storage?

Core Storage is an additional file-system management layer used by macOS to provide disk encryption as used by FileVault and to combine separate disks as used by Fusion Drive.

Which two built-in macOS applications can be used to gather information about storage devices?

Disk Utility and System Information can both be used to gather information about storage devices.

How are disks, partitions, and volumes different from one another?

Disks are the actual storage hardware. Partitions are logical divisions of a disk used to define the storage space. Volumes, contained inside partitions, are used to define how the individual files and folders are saved to the storage.

How does file-system journaling work

File-system journaling records what file operations are in process at any given moment. This way, if a power failure or system crash occurs, after the system restarts it will be able to quickly verify the integrity of the volume by "replaying" the journal.

What is the function FileVault for?

FileVault encrypts the startup volume to protect macOS from unauthorized access. FileVault is a full-disk encryption that uses XTS-AES-128 encryption with a 256-bit key to help prevent unauthorized access to the information on the startup disk. FileVault performs the encryption at the file system driver level of macOS. Most processes and apps run normally when the startup volume is encrypted.

How can you encrypt a disk without losing its contents?

From the Finder, you can encrypt a disk without losing its contents by secondary-clicking (or Control-clicking) the disk and then choosing Encrypt from the shortcut menu.

What are the two primary partition schemes for disks formatted for Mac systems and what are their differences?

GUID Partition Map (GPT) is the default partition scheme on Intel-based Mac computers. Apple Partition Map is the default partition scheme on PowerPC-based Mac computers.

What is the potential side effect of improperly unmounting or ejecting a disk or volume?

Improperly unmounting or ejecting a drive or volume may cause data corruption. The system automatically verifies and repairs an improperly unmounted or ejected volume the next time it becomes available to the Mac.

If the user forgot the password for FileVault, can the data still be recovered?

No. If user forgets Filevault password, there is no way to help user. Even Apple cannot help unlock Volume. User must make sure to securely store and protect the FileVault key and stored it securely at a location other that the computer itself. If Filevault is enabled, user has the option to encrypt individual files or folders.

What is Target Disk mode?

Target Disk mode enables a user to share files between two MAC Computers that are connected through Fire Wire, Thunderbold 2, USB-C, or Thunderbold 3 (USB-C) ports. In a Target Disk Mode, the 'host' Mac OS X computer has the ability to repair the Partition Table and Volumes, examine files manually in the 'target' computer. This is done be enabling Target Disk Mode in the target computer.

What is target disk mode and how is it engaged?

Target disk mode is a hardware feature specific to Mac systems that, when engaged, shares the Mac computer's internal disks through the FireWire ports. Target disk mode can be engaged from Startup Disk preferences or by holding down the T key as you turn on the Mac.

What does the Disk Utility First Aid feature do?

The Disk Utility First Aid feature is used to verify and repair the partition scheme and directory structure of a volume. These elements contain the information used to locate files and folders on the volume.

What five methods can be used to eject a volume or disk from the Finder?

The five methods used to eject a volume or disk in the Finder are: 1. Drag the disk icon to the Trash in the Dock 2. In the Finder sidebar, click the small Eject button next to the volume you want to eject 3. Select the volume you want to eject and then choose File > Eject 4. Select the volume you want to eject and then use the Command-E keyboard shortcut 5. Select the volume you want to eject and then secondary-click (or Control-click) to reveal a pop-up menu allowing you to select Eject

What are the four erase options available in Disk Utility and how are they different?

The four erase options in Disk Utility are: 1. Don't Erase Data (fastest), which simply replaces the volume's directory structure 2. Two-Pass Erase, which writes a pass of random data followed by a second pass of zeros on the disk 3. 3-Pass Erase, which writes two separate passes of random data followed by a third pass of zeros on the disk 4. 7-Pass Erase (most secure), which writes seven separate passes of random and patterned data on the disk

Which tool is used to manage partitions on a disk in OS X?

The primary storage management tool included in macOS X is Disk Utility. This utility can perform all kinds of tasks from examining storage, ... Figure below shows a view of Disk Utility to examining the physical SSD Storage Device.

What two volume formats are supported for a macOS system volume?

The volume formats supported as system volumes for macOS are: • Mac OS Extended (Journaled) • Mac OS Extended (Journaled, Encrypted)

How does one enable FileVault?

There are two ways to enable FileVault: 1. During initial installation of the operating system - During the initial setup and configuration of macOS X, if user provided his/her Apple ID, Setup Assistant will ask: "Would you like to use FileVault to encrypt the disk on your Mac?" as shown below. In this scenario user has the option to turn on FireVault disk encryption. 2. From Security and Privacy preferences - If user did not turn on FileVault when prompted by Setup Assistant, FileVault can be turned on at any time from Security & Privacy preferences. Click "Turn On FileVault" button followed by clicking the the lock button and authenticate as an administrator user.

How does one securely erase files?

To securely erase volumes in a mac OS X file system, choose "Security Options" button in Disk Utility as shown below: to specify whether you want to securely delete information in disk.