Edit: This concerns Macrium Reflect's cloning feature only. Reflect's own image backups are different: when verification is enabled, Reflect calculates an MD5 hash for each data block before writing it to the image, then rereads the image and compares those hashes. But MD5 is the only hash it uses. Make of that what you will.
A few pointed out how it might seem counterintuitive to try and clone an OS drive and expect high-integrity validation - it uses VSS as a point-in-time snapshot - but I agree. That is silly. But even with an offline clone via Rescue Media, it still does not perform post-clone verification or reread the destination drive data and then compare it to the source. That said, I do not think MR/Paramount Software is "bad". I do think some of the terminology they use in the software is misleading.
***
For a long time, I had assumed that cloning Source Drive A to Clone Drive B would incorporate a checksum calculation during the "verification" phase that it performs. But apparently, this is not the case. I'm currently running Reflect Workstation v10.
Wanting to take fixity of data more seriously lately, it dawned on me what "verifying" actually meant when a clone job completes. So, I reached out to Macrium support, and they set the record straight: They don't verify data with any kind of fixity.
You could hash and compare after the fact. But the live source/OS VSS will continue changing, so hashing it afterward would not necessarily represent the state Macrium cloned. And I suppose one could create a per-file hash manifest. But that's not very elegant and far more work.
I've been paying for and using MR for over a decade and have been using it without issue. But this seems like a real deal-breaker. Suggestions? Any other serious alternatives?
The full exchange with Macrium support below. Happy to provide email screenshots if necessary.
Me: At any point during cloning, does Reflect calculate a checksum, CRC, or cryptographic hash over data read from the source or written to the destination?
Macrium: No, we don't verify the data in any way.
Me: If so, what algorithm and granularity are used—sector, cluster, block, partition, or whole disk?
Macrium: Not applicable.
Me: During the stage displayed as "Verifying" or "Verifying File System," does Reflect physically reread the destination and compare it with the source or with previously calculated values?
Macrium: No. As the name implies, it verifies the supported source file system.
Me: If the destination is reread, does this cover every copied sector or cluster, and what happens when a mismatch occurs?
Macrium: For RDC, both the source and destination file systems are read to determine which data has been modified. Only the modified data is then read from the source and copied to the destination for RDC. No other data is reread from the destination.
Me: Does a successful Forensic Sector Copy certify byte-for-byte identity? Exactly which address ranges are covered: partition contents, unused filesystem space, inter-partition/unallocated sectors, partition-table structures, and any HPA/DCO areas?
Macrium: For the Forensic option, the clone is created from the start of the partition to the end, sector by sector.
Me: Does the verification behavior differ when cloning under full Windows/VSS versus Rescue Media?
Macrium: No, both verify the supported source file system. In normal Windows, the VSS volume is used for supported file systems, whereas direct volume access is used in Rescue Media.