Skip to main content
Question

T2 chip smart group

  • May 6, 2020
  • 3 replies
  • 17 views

Forum|alt.badge.img+4

I am trying to create a report for a security audit coming up.

When looking at the filevault status on t2 computers its showing as not encrypted. However when you look at the computers it is showing filevault is enabled. From my understanding, computers with t2 chips are encrypted out of the box.

Is there a way to include the t2 in a search or is there a way to make it report that it is encrypted?

3 replies

Forum|alt.badge.img+13
  • Contributor
  • May 6, 2020

Vote this up.

You can also use that diskutil like to build an extension attributte.


Forum|alt.badge.img+13
  • Valued Contributor
  • May 6, 2020

This may be more than you need but take the parts you want:
https://www.jamf.com/jamf-nation/discussions/33634/mac-activation-lock-status-script-ea

Specifically this part: This will report the chip type in the mac computer. IE.. T1, T2
Chip="$(system_profiler SPiBridgeDataType | awk -F: '/Model Name/ {print $NF}' | sed 's/^ *//')"


brockwalters
Forum|alt.badge.img+8
  • Valued Contributor
  • August 2, 2022

The Model Name field is no longer returned in the SPiBridgeDataType data type. What's the alternative?