Does SD work with PGP Whole Disk Encryption?

[lou]

Each night I use Super Duper to clone my drive to a duplicate internal drive.

I don't use filevault since this forces me to exit filevault (log out) and boot under a different use to super duper the FileVault portion (I assume this has not changed.)

But PGP has a new tool out called "PGP Whole Disk Encryption" that is similar to filevault.

http://www.pgp.com/products/wholedis...ion/index.html

I was hoping someone knew if I used PGP Whole Disk Encryption if I would also have to boot from a different user to Super Duper Clone my drive or if I could simply Super Duper Clone my drive as I am normally doing now. (not logging out. Just launching and running.)

thanks.

[dnanian]

The current version does not fully support this (unless they've made some changes), but the next update does. (No, I do not have a release date to announce or hint at.)

[lou]

Is your comment in regards to PGP Whole Disk or FileVault?

thanks!

[dnanian]

Whole disk encryption.

[lou]

Originally Posted by dnanian

Whole disk encryption.

OK. thanks. It's really a pain to clone when one has to log out, so I will prob. wait on the PGP Whole Encrypt.

Glad to see it is on the road map though.

[lou]

To follow up with one last question:

IF I instal PGP whole disc encrypt,

That means I will have to:

Log Out
Restart with a different disk that has at OS X on it.
Run Super Duper, clone the PGP disk to another disk.

Reboot after Super Duper is done, back to the original PGP encrypt disk and log in thru their method.

thanks.

Really trying to weigh the encryption to clone back up thing in my mind.

[dnanian]

Not that I know of. You should be able to just copy.

[jc1350]

PGP Whole Disk Encryption, when used on the boot disk, needs to be "decrypted" (password entered) pretty much immediately after the boot chime and the OS won't load until you enter the password.

Unlike FileVault, you can't log out and log in as another user to get away from PGP WDE.

[jc1350]

According to this thread at PGP's forums:

http://forum.pgp.com/pgp/board/messa...thread.id=1806

You can clone you WDE disk with no problems if you exclude the file PGPWDE01. Of course, if your target disk isn't already encrypted, you backup won't be encrypted when it's done.

I'm going to try this tonight and I'll report back with my results.

John

[dnanian]

Correct. But you can't copy TO an encrypted drive. :-)

[jc1350]

Copying with SuperDuper and excluding /PGPWDE01 worked perfectly, including booting from the backup disk.

[lou]

Thanks for following up.

My question now would be. The disk you super duper'd to, that you exclude the special file from, that is no longer encrypted correct? i mean it makes sense but I just want to double check.

This has the bad effect of you have a whole disk encrypted in your mac pro AND a clone of that disk without protection in the 2nd drive bay slot so if your machine is stolen you are not safe.

The solution would then be to clone to an external and lock it up I suppose.