Skip to main content
Question

Filevault profile preventing password changes

  • March 21, 2014
  • 2 replies
  • 9 views
L
Forum|alt.badge.img+13

So I decided to try managing FileVault with Casper, and I setup a profile as they did in this video:
http://www.youtube.com/watch?v=mz1H__EsnPM

We bind our Macs to AD with Centrify.

Encryption went fine (although it was showing the users the key, so I got some post-its with "Do you need this"). I was then getting reports that users couldn't change their password, that the button was greyed out. I finally found that by removing the FileVault profile, the button enabled again.

This is despite not setting any options under Security & Privacy => General tab. And then changing "Allow user to change password" both on and off.... didn't matter, still grayed out. Only thing that changed it was removing the profile.

Mavericks 10.9.2, Centrify 5.1.3. Haven't patched our JSS to latest yet, I think I'm one behind.

    2 replies

    M
    Forum|alt.badge.img+7
    • matt_jamison
    • Contributor
    • December 4, 2014

    This is a known issue and I have had a defect open with JAMF for quite some time now. They try to blame it on Apple but I did a comparison between the config profiles and found the issue. I then created a custom payload that solved my problem. I was just trying to block users from being able to turn off encryption.

    M
    Forum|alt.badge.img+7
    • matt_jamison
    • Contributor
    • December 4, 2014

    Defect# D-005736, FYI. In the release notes it doesn't say exactly this problem but I confirmed with JAMF they have it in the notes on their side.

    Terms & ConditionsCookie settingsAccessibility statement