View Single Post
Old 01-08-2020, 04:14 PM
jwhitley jwhitley is offline
Registered User
Join Date: Nov 2007
Posts: 5
Catalina and FileVault recovery workflow

I'd like to clarify the recovery workflow when using SuperDuper! with Catalina and a FileVault-encrypted external drive. Scenario:
  1. Do the Catalina-era song-and-dance to create a bootable, FileVault-encrypted backup using SuperDuper.
  2. The original system including the T2 chip is lost/damaged/etc, now permanently inaccessible.
  3. Restore the encrypted backup to a new system. ? ?? ???

Consider this statement from Apple Support:

The advanced encryption technology integrated into the T2 chip provides line-speed encryption, but it also means that if the portion of the T2 chip containing your encryption keys becomes damaged, you might need to restore the content of your drive from a backup.
Given that, is it possible to actually perform the restore in step #3 above? Unfortunately, I don't have a second T2-equipped Mac to test with. It's not clear whether iCloud recovery or a local recovery key will even work to decrypt the drive on another T2-equipped system.

If recovery in the above scenario is no longer possible, this should be emphasized to Catalina users in the strongest possible terms. Bootable encrypted backups would no longer serve as data-loss insurance against system damage or loss.
Reply With Quote