Working with the application

Setting Up a Time Machine Server

File Sharing

To set up a Time Machine server on a Mac in your local network, it is necessary to enable the SMB file server of macOS that will share the data for access. SMB is the Server Message Block protocol recommended by Apple for file sharing. It is also being used by other operating systems such as Microsoft Windows® or Linux®. As of OS X 10.9 Mavericks, this protocol has become the standard for file services on the Mac.

The Time Machine server is set up by enabling at least the SMB file server and one destination folder.
The Time Machine server is set up by enabling at least the SMB file server and one destination folder.

If SMB file sharing is not enabled yet on your Mac, perform the following steps:

  1. Switch to the tab item Settings in the main window of Backup Server Control.
  2. Set a check mark at File Sharing: Share files and folders using ….
  3. Identify yourself as administrator if macOS should ask for it.

Attention Important: Enabling macOS file services may also share other files with the network, not only the folder(s) for the Time Machine server. You can review the complete list of shared objects using the table at System Preferences > Sharing > File Sharing > Shared Folders. Remove all items which should not be accessible from the network. As of macOS 13 Ventura, use System Settings > General > Sharing > File Sharing > i > Shared Folders.

Preparing a Destination Folder

All disk volumes formatted with either the Apple File System (APFS) or the older format Mac OS Extended (Journaled), also called HFS+, can be used as target for network-based Time Machine backups. It is recommended to use an empty disk which does not contain any other data as work folder for your Time Machine server. You must never use a local Time Machine volume (a disk where the server itself stores its own Time Machine backups) as destination for the network backups of other Macs. Always use separate volumes, or even better, separate disk drives for local Time Machine and network-based Time Machine.

If you are using the older HFS+ standard for a backup destination, it will be possible to additionally enable the deprecated Apple Filing Protocol (AFP) to share the folder on the network. AFP typically gives you more speed but less security. You can choose for each backup destination compatible with AFP whether you like to use the older protocol or not.

Choosing the combination HFS+ format with AFP sharing has no influence on the compatibility with Time Machine sharing at the moment, however. Only clients running macOS Sierra 10.12 or later can access a modern Time Machine server, no matter whether AFP is active.

The application automatically checks whether you are using SMB only, or whether you have additionally enabled AFP, either for Time Machine sharing or other file service purposes configured with System Preferences (System Settings as of macOS 13 Ventura). The check mark Share files and folders using … will automatically reflect that and enable a single or both file servers accordingly. Other file servers that are part of macOS (for the protocols NFS, SFTP, or WebDAV) won’t be affected.

You can use Disk Utility to prepare a new disk for use with the Time Machine server. It can also convert a used volume which contains data in Mac OS Extended (Journaled) format to APFS if necessary.

Attention WARNING: You must never try to convert a local Time Machine disk to APFS format! This will cause complete loss of all backups stored on that disk and will also make it incompatible with future local backups.

Preparing a new empty disk drive for use with the Time Machine server

If you have an empty disk that should store the backups of the Macs in your network, you can prepare it as follows:

  1. Launch Disk Utility.
  2. Use the leftmost button View in the toolbar and switch it to Show all devices.
  3. Select the empty disk drive in the sidebar. It should appear with its device name. Be sure to choose the correct entry which must be shown left-justified, not indented.
  4. Press the button Erase in the toolbar.
  5. In the dialog sheet, specify a name for the new disk in the field Name.
  6. Select Format: APFS and Scheme: GUID Partition Map. You can alternatively select Format: Mac OS Extended (Journaled), but this is not recommended.
  7. Press the Erase button.

You don’t need to choose an encrypted format. If you like to enable encryption for network-based Time Machine backups, you will be able to specify this later on the client side.

Ensure that permissions are supported

In some cases, macOS assumes that volumes on external disks are used to transfer data between different Macs. To make this easier, a special preference setting might have been activated that causes file ownership on the entire volume to be ignored. You should make sure that this feature is not enabled on the volume that you plan to be used by the Time Machine server:

  1. Choose the volume in the Finder.
  2. Select the menu item File > Get Info.
  3. In the Info window, make sure the section Sharing & Permissions is fully visible.
  4. Verify that the option Ignore ownership on this volume is not set. If it is set, click on the lock icon, authenticate as administrator, and remove the check mark.
Disk Mounting without User Session

Because macOS prefers to handle external drives like removable disk media, as mentioned in the previous section, this also has the consequence that external drives will be ejected and become inaccessible after the user has logged out. Some drives may even power down in this situation.

This default policy is not useful when you operate the computer as a Time Machine server. Backups on external drives should remain accessible, no matter if a user is logged in at the graphical console or not. To change this policy, set a checkmark at Allow remote access to external drives while no user is logged in on this Mac.

This option affects all volumes on all drives which macOS considers “external”.

Backup Destinations

Using the table Backup Destinations you specify into which folders the backups of Macs in your network should be stored on the server. You can share one or more folders for use with Time Machine. They will appear as separate destinations for backups on client computers. The table also shows an overview how much storage space is still available on the respective volumes.

The following technical restrictions must be considered:

See the previous section for detailed information on both items.

It is recommended to use the Finder to create a new, empty folder which should be used as backup destination. The permissions of this folder must be set in a way so that the user account (or multiple accounts) of the server that will later be used by the client Macs for access has write permission at that location.

If you like to use a folder as backup destination for Time Machine in the network, perform the following steps:

  1. Switch to the tab item Settings in the main window of Backup Server Control.
  2. Press the button + below the table Backup Destinations or select the menu item Configuration > Add Backup Destination….
  3. Choose the desired folder.

To quit sharing a folder for Time Machine, select its entry in the table. Press the button below the table or select the menu item Configuration > Remove Backup Destination…. Backup Server Control will ask for an additional confirmation. Please note that no backups will be erased. Only sharing in the network will stop.

Configuring Time Machine on a Mac in the Network

After sharing protocol and backup destination have been set up appropriately, you will see a respective note in the line Status together with a green marker. Now Macs in the local network can create Time Machine backups on the server. Such Macs only need to run the operating system macOS 10.12 Sierra or later. The following steps need to be performed on each respective client computer:

Steps for macOS 13 Ventura:
  1. Open System Settings.
  2. Go to General > Time Machine.
  3. Click the + button below the table.
  4. Choose the right backup destination from the list. It is shown with a network share icon and the name pattern Folder on “Server” where Folder is the name of the shared folder and Server is the name of the server computer.
Steps for older versions of macOS:
  1. Open System Preferences > Time Machine.
  2. Click the button Select Disk….
  3. Choose the right backup destination in the table. It is shown with a network share icon and the name pattern Folder on “Server” where Folder is the name of the shared folder and Server is the name of the server computer.

To get permission to access the backup destination, the client Mac has to authenticate with a user account of the Time Machine server. This account needs to have write permission for the folder of the backup destination on the server. If needed, new accounts can be created with System Preferences (as of macOS 13 Ventura: System Settings) on the server side. It is recommended to create a sharing only account, so the account can only be used for file sharing purposes, but cannot be abused for login at the server computer.

Further instructions can be found in Apple’s online help of the respective operating system.

Setting Up Quota for a Backup Destination

In theory, an unlimited number of computers in the network can use a single backup destination. The computers compete with each other for the space available on the shared volume. To prevent consuming more storage that intended and to guarantee that each Mac receives the same, “fair” amount of available space, a quota can be set up if needed. For each Mac using a certain backup destination, this will define a maximum amount of how much storage space can be used. This maximum value will be equal for all participants of the same destination.

For each backup destination, a fair upper limit can be set for the storage space allocated for each participating Mac.
For each backup destination, a fair upper limit can be set for the storage space allocated for each participating Mac.

After creating a new backup destination, Backup Server Control automatically shows a dialog to define the optional quota value. You can also enable this feature at a later time:

  1. Switch to the tab item Settings in the main window of Backup Server Control.
  2. Choose a line in the table Backup Destination where you like to review or change the quota.
  3. Press the button with the pen icon below the table.
  4. Enable or disable the quota or specify a new storage limit. The maximum value must be specified in Gigabytes.
  5. Close the dialog with the OK button.

Enforce encryption of network traffic

For enhanced security, you may like to ensure that all network traffic associated with access to the remote Time Machine backup is sent encrypted over the network. This is independent of the question whether the network client is already encrypting the backup files on the server. To enforce encryption of the network traffic, set a check mark at Only allow SMB encrypted connections. Enabling this feature will automatically disable use of AFP for this backup destination, because AFP cannot support encrypted network data packets.

Enabling support of AFP

If you like to use AFP in addition to SMB for some reason, you can enable it via the check mark Allow additional AFP access. Note that modern macOS clients always prefer SMB for network file services. AFP also won’t work with data stored on APFS volumes.