How would you go about finding out why casper is only reporting: Boot Partition Encrypted vs All Partitions Encrypted, when I go into the inventory, I only see one drive and it says 100% encrypted.
Answer
Filevault - Boot Partition Encrypted
+18Best answer by rich.trouton
To follow up on that, I've got an extension attribute available here:
+24I've seen this in cases where an external disk was also plugged into the system while it was inventoried. I've never seen this occur when there was only one local disk. Do you have network drives that mount? I wonder if there was a mounted network disk which may make FileVault report "boot disk encrypted" instead and a network disk wouldn't show up in the "hard drives" section in the Casper inventory.
+1Bootcamp or Grub loader installed? Just started evaling casper this last week and the first thing I deployed was filevault 2 to a set of test machines. The one with bootcamp came back as "Boot Partition Encrypted". Since it will not be able to of course encrypt the other partition I would assume it comes by as only the boot partition was encrypted and not the rest.
+24Bootcamp or Grub loader installed? Just started evaling casper this last week and the first thing I deployed was filevault 2 to a set of test machines. The one with bootcamp came back as "Boot Partition Encrypted". Since it will not be able to of course encrypt the other partition I would assume it comes by as only the boot partition was encrypted and not the rest.
'
This is a great point. Technically speaking, FV2 is a volume-based encryption tool, not full disk. However in most cases there is only 1 volume anyway...
+18Found it to be the users that had external HD'S plugged in.. Even though the drives were encrypted casper reported it as boot partition encrypted, instead of all..
+24I suggest you build your own Extension Attribute (or grab one out there already) to report on FileVault 2 status. Don't rely on the one built into Casper. its hard to pull any actual report on the state of encryption with it.
To follow up on that, I've got an extension attribute available here:
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.