Require External Drive Encryption

[Sobchak]

We are looking at requiring all external drives to be encrypted. What does everyone use?

[rderewianko]

We're looking at defining this in a few ways.

Whitelisting drives except ones we supply.

The drives we supply are apricorn encrypted drives that are encrypted with a few pins. Going this method provided us the most painless way of ensuring the drives our staff need to use are indeed encrypted.

[ammonsc]

@rderewianko Are you able to use the Apricorn drives as a bootable macOS installer? I have been testing it but when the machine reboots the drive locks again and I cannot unlock it fast enough.

[edickson]

I'm not sure I have too much to add here but previous employers have gone so far as to ban external drives except in the most rare cases and use cloud storage and/or enterprise backup solutions instead.