Skip to main content
Question

List FileVault 2 Enabled users

  • Mar 29, 2020 9:47 AM UTC
  • 4 replies
  • 117 views

Forum|alt.badge.img+8

Hello...

I thought this would be easy but I'm struggling.

I need to create a report that contains all "FileVault 2 Enabled Users" per machine that is rolled into Jamf.

I can click on an individual machine and check it manually per machine at the disc encryption section, but I can't figure out to have this automated into a report via an Inventory search/Smart Group.

Anyone?

4 replies

donmontalvo
Forum|alt.badge.img+36
  • Hall of Fame
  • Mar 29, 2020 3:33 PM UTC

Would an EA help...even if Jamf Pro has issues with carriage returns?

#!/bin/bash

STATUS=$(fdesetup status)
LIST=$(fdesetup list | cut -f1 -d",")

if [[ $STATUS = "FileVault is on." ]]
then
    echo "<result>"$LIST"</result>"
else
    echo "<result>"$STATUS"</result>"
fi

The report would just need to include the EA data.


Forum|alt.badge.img+13
  • New Contributor
  • Oct 5, 2020 10:02 PM UTC

How do we setup the EA to list the users with this?

The output we are currently seeing FileVault 2 users:
FileVault is On. FileVault master keychain appears to be installed.


Forum|alt.badge.img+13
  • New Contributor
  • Oct 6, 2020 3:14 PM UTC

Can you also recommend a way we could modify this to list non FV2 users?


Forum|alt.badge.img+11
  • Valued Contributor
  • Sep 28, 2022 8:51 AM UTC

There is a ";" missing in the original post, this one works for me:

#!/bin/bash

STATUS=$(fdesetup status)
LIST=$(fdesetup list | cut -f1 -d",")

if [ "$STATUS" = "FileVault is On." ];
then
echo "<result>"$LIST"</result>"
else
echo "<result>"$STATUS"</result>"
fi