FileVault 2 wont enable.

Thank you! I was looking for that list, my googlefu failed me.

i checked the keychain app and found nothing, but when I went to /library/keychains it was there. I removed and it prompted/encrypted as expected.

Now I gotta figure out what's causing the creation of that keychain and unlock the root user...

The FileVaultMaster keychain is created when you use the "Set Master Password..." option in the "Users & Groups" System Preference. Are you, or someone else, doing this as part of your initial setup?

....
Why yes we are. You're a genius!

Apple OS X: How to create and deploy a recovery key for FileVault 2
http://support.apple.com/kb/HT5077

And here I thought it was a limitation of a virtual environment. *hatsoff*

I'm having the same issue, I deleted the FileVaultMaster.keychain file in /Library/Keychains but when I log out and enter my password it gives me the same error and then the FileVaultMaster.keychain re-appears.

I'm getting the following when trying to enable FileVault using our institutional key:

Apr 4 10:31:24 franky-mbpr ManagedClient[635]: MCX.doCmdLogout: setupFileVaultFDE enable returned 188

I can't find what that error code means.

I think i saw that one recently on a machine that had no recovery partition

Chris is correct. Error 188 means that it cannot find a Recovery Partition, which is a requirement for FileVault 2.

For modern Macs, we will usually do an internet recovery install of OS X (which creates a Recovery Partition) for Macs we know will be FV'd. Alternately, for older Macs that don't have the ability to do an internet recovery, I've have tons of success with "Recovery Partition Creator".

Has anyone had an issue with fdesetup where the exit status is always "0" no matter what the outcome?

Im using the plist method posted here https://jamfnation.jamfsoftware.com/discussion.html?id=11869

When the script runs "sudo fdesetup add -i < /tmp/fvenable.plist" and I purposely enter the incorrect password I get the response "Error: Unable to add user 'username' to existing FileVault because the user could not be authenticated".

Right below this line in the script is "if [ $? = 0 ]; then" which returns a "0 = 0" value and continues even thou it failed.

Here is the part of the script

until [ $counter = 2 ]; do
    sudo fdesetup add -i < /tmp/fvenable.plist
        if [ $? = 0 ]; then
            counter=2
        fi  
done

Here is the result, im using "set -x" to see these results.
+ sudo fdesetup add -i
Error: Unable to add user 'username' to existing FileVault because the user could not be authenticated.
+ '[' 0 = 0 ']'
+ counter=2
+ '[' 2 = 2 ']'

Bump. I have started getting the same error that @richmac has:

Error: Unable to add user 'username' to existing FileVault because the user could not be authenticated.

Has anybody gotten this figured out?

@mattbomarc1 i did solve this, if i remember correctly i had to define $4 and $5 as variables first. For some reason the values set within casper for $4 and $5 were not being passed into the plist data.

Leave the values set within casper for $4 and $5 and add these to the top of your script:

adminAcc="$4"
adminPass="$5"

Then replace $4 and $5 within the xml with the variables as below

create_plist () {
    echo '<?xml version="1.0" encoding="UTF-8"?>
    <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
    <plist version="1.0">
    <dict>
    <key>Username</key>
    <string>'$adminAcc'</string>
    <key>Password</key>
    <string>'$adminPass'</string>
    <key>AdditionalUsers</key>