

Encrypt that core storage volume with your keyfile.Add a keyfile (max 1023 chars) to that drive.I'd post the vital steps here, but it is a fairly long and involved process. I wrote up an article detailing how I did this. I went down a rabbit hole to get an encrypted $HOME working, and so I still use it, but FileVault is superior in just about every way. To be clear, FileVault is much simpler, but it is possible to do what you ask. I'm on 10.11.6, but the same principles should apply. Only available for some decryption operations.I do this on my own Mac at home with scripts that run at boot and mount a Core Storage volume. You are asked to move the mouse to create a random pool. Volume Format - Select the file system and cluster size.PIM stands for Personal Iterations Multiplier, it is a number that you need to supply when mounting volumes when you set it during setup. Keyfiles are files that need to be present to decrypt the drive and PIM.

Volume Password - The master password that is used to encrypt the drive.Volume Size - Only available if you select the container option.You can run the benchmark from the page if you have not done so already. Encryption options - Select an encryption and hash algorithm.Volume location - Select a file (it gets created) or a partition that you want to encrypt.If someone forces you to unlock the drive, only the standard volume is unlocked. Hidden volumes are created within standard volumes. Standard or hidden volume - You can create normal volumes or hidden volumes.The core difference between creating a container and encrypting a partition is that you select a file when you select the former and a partition when you select the two other options. The process is nearly identical for all three options. Settings > Default keyfiles - If you use keyfiles to authenticate (more about that later), you may add keyfiles to the list of default files.Settings > Performance and Driver Options - Find out if AES hardware acceleration is supported, allow certain performance or driver related tasks such as TRIM or Defrag.Settings > System Favorite Volumes - Add volumes to the favorites.to skip the pre-boot authentication prompt by pressing the Esc-key. Settings > System Encryption - Options that apply when you encrypt the system drive e.g.Settings > Hot Keys - configure system-wide hot keys to run certain operations such as dismounting all or wiping the cache.Settings > Language - change the interface language.

Phone support, online features, and other services vary and are subject to change. 14,500+ participating financial institutions as of October 1, 2018. Third-party terms and additional fees may apply. Monitoring alerts, data downloads, and feature updates are available through the end of your membership term. Options include forcing VeraCrypt to wipe the cached password on exit (VeraCrypt does to automatically on dismount), or cache passwords in the driver's memory.

Default mount options - select to mount volumes as read-only or removable media.The developers squeezed a lot of settings on that single page and there is even a 'more settings' button at the bottom that links to other Settings windows. Select Settings > Preferences to open the general preferences.
