Encrypting an External Drive – UVM Knowledge Base (2024)

You must ensure your external drive is properly formatted so that macOS can read, write, and encrypt it.

To encrypt your drive:

1. Click the Spotlight Search magnifying glass, then search for and open Disk Utility.
   
2. Find and select your external drive, then verify the drive’s format.
   Acceptable formats include:HFS+,APFS, Mac OS Extended (Jornaled)

   Drive already encrypted?

   If your drive is already encrypted, you are all set.

   See Also

   Performance impact of disk encryption using LUKS | Sovereign Cloud StackExternal Hard Drive Encryption: Keeping Your Data Secure:Full Disk Encryption FAQs - Technical Support | Seagate US

   
   

1. Click the Spotlight Search magnifying glass, then search for and open Disk Utility.
2. 
3. Select your external drive, then clickErase.
   
4. Click theFormat dropdown.
   
5. From the list of available formats, selectMac OS Extended (Journaled, Encrypted) orAPFS (Encrypted).

   By selecting an encrypted format, you can skip the Encrypt with FileVault section below!

   

6. Enter a secure, memorable password and the password hint as required, clickChoose, then clickErase.
   
7. The drive should now be reformatted and encrypted as required.
   

1. You should see an icon on your desktop that looks similar to the images below.
   
2. Right click on the external drive you would like to encrypt, then click the option markedEncrypt “Time Machine”.
   
3. Enter a secure, memorable password and the password hint as required, then clickEncrypt Disk.

   Don't forget your password!

   While FileVault keys can be generated for managed UVM owned machines, they cannot be generated for external hard drives.

   
   

4. The drive should now proceed through the encryption process. Verify the drive has encrypted by selecting the drive in Disk Utility.

If your drive is improperly formatted, in addition to limitations reading and writing to the drive, encryption may be impossible. You drive can be reformatted using the instructions in the next section.

1. Open Windows Explorer, right click your external drive, then select Properties.
2. Under the General tab, find the section markedFile System
   and verify it saysNTFS. If your drive is improperly formatted, see the section below. Otherwise, skip to Encrypt with Bitlocker.

This is a DATA DESTRUCTIVE process. Proceeding with the steps outlined below will delete all data on the selected drive.

1. Open Windows Explorer, right click your external drive, then clickFormat.
   
2. This process will completely erase all data on your external hard drive. If this is acceptable, clickOK.
   
3. Ensure the drop down underFile System is NTFS, then clickStart.
   
4. After your drive has been successfully formatted, click OK, then continue to the next section.
   

1. Open Windows Explorer, right click your External Drive, then selectTurn on BitLocker.
   
2. SelectUse a password to unlock the drive, enter a secure and memorable password as required, then clickNext.

   Don't forget your password!

   While BitLocker keys can be generated for managed UVM owned machines, they cannot be generated for external hard drives.

   

3. Click Save to a file, then choose where to save your recovery key. The recovery key can be used if you forget your password.
4. Read through this page and select how to encrypt your drive, then clickNext.
5. Click Start encrypting.
   
6. Wait until the encryption has finished, and then click Close.