2 ms·
Edit: Below doesn't apply to T2 enabled Macs. If you erase the volume, regardless of whether you had FileVault enabled or not, the key is deleted [0]. If
by WirelessGigabit 4y ago
Edit: Below doesn't apply to T2 enabled Macs.
If you erase the volume, regardless of whether you had FileVault enabled or not, the key is deleted [0].
If FileVault isn’t enabled on a Mac with the T2 chip during the initial Setup
Assistant process, the volume is still encrypted, but the volume key is protected
only by the hardware UID in the Secure Enclave.
and
When deleting a volume, its volume key is securely deleted by Secure Enclave
[0] https://www.apple.com/mideast/mac/docs/Apple_T2_Security_Chip_Overview.pdf https://www.apple.com/mideast/mac/docs/Apple_T2_Security_Chi...
-----------------------------------------------
Incorrect ramblings below:
-----------------------------------------------
Apple recommends setting up FileVault on their SSDs. It is literally the only way to ensure that the data on the SSD is not recoverable.
And you should do this before you put anything ON the Mac.
If you add a file and only later encrypt the drive, you have no guarantee that that file still isn't somewhere readable one way or another.
This is important when you think about buying a Mac and then choose to return it 3 days later.
Apple states [0]:
Note: With a solid-state drive (SSD), secure erase options are not available in Disk Utility. For more security, consider turning on FileVault encryption when you start using your SSD drive.
On their dedicated encryption page [1] they do state that devices with T2 are encrypted by default:
Note: If you have an iMac Pro or another Mac with an Apple T2 Security Chip, the data on your drive is already encrypted automatically. However, turning on FileVault provides further protection by requiring your login password to decrypt your data.
However I can't find any reference to see how to reset that built-in key.
[0] https://support.apple.com/guide/disk-utility/erase-and-reformat-a-storage-device-dskutl14079/mac https://support.apple.com/guide/disk-utility/erase-and-refor...
[1] https://support.apple.com/guide/mac-help/encrypt-mac-data-with-filevault-mh11785/mac https://support.apple.com/guide/mac-help/encrypt-mac-data-wi...