Skip to main content
Question

Jamf FileVault Encryption Issue on Catalina User Initiated Enrolment

  • February 20, 2021
  • 1 reply
  • 11 views
P
Forum|alt.badge.img+2

Hi All,

Need suggestion on Jamf FileVault Encryption. FileVault encryption is working and disk is getting encrypted for the devices getting enrolled via DEP but not for the device getting enrolled via User Initiated Enrolment for macOS catalina. Where as on macOS BigSur, both the device (One getting enrolled via DEP and the other geting enrolled via User Initiated Enrolment) is getting encrypted.

Any headsup is appretiated pl.

    1 reply

    N
    Forum|alt.badge.img+1
    • newvisions
    • New Contributor
    • February 22, 2021

    Greetings,

    As far as my understanding is. Filevault2 works on Secure tokens and aswell Boostrap tokens. Those have specific criteria on how they are obtained. With Jamf 10.26.1 Boostrap tokens auto-assigned were introduced to devices enrolled via DEP with creating a local account within the setup assistant.
    With BigSur this is even a bigger thing for tokens to properly be obtained. Some information from JNUC 2021 is explained on this video and I hope it helps. https://www.youtube.com/watch?v=wgWsIW9E4V4
    Note: As well in prestage checking off the box Prevent the user from enabling Activation Lock would help on providing the bootstrap token to the user via DEP. There was a bug on Jamf's end and this was their workaround.

    My question would have been. If upgrading users from Mojave to Catalina and they do not receive the bootstrap token or do not have a proper secure token how is that being handled then. Apologies if this does not answer your question directly but maybe puts you on a path to it. Also, suggest opening a support ticket with Jamf.

    Best,

    Terms & ConditionsCookie settingsAccessibility statement