Hey everyone,We're currently in the POC phase with Jamf, and there's something that's really bugging me. We tried Kandji before, and their FileVault solution is way better than Jamf's. With Kandji, you just set up the profile, assign it to a Blueprin... View more
Hello,Lately in our environment, our local management account on Mac has lost the ability to log in because it is no longer Filevault unlockable. When we set up our Macs, we enable FileVault via Jamfs config profile and policy using DEPNotify. Once D... View more
I have combed through all the threads here before posting, I am trying to figure out why this is happening to all unencrypted Macs on this server. The user gets a pop-up to enable FV, enter password, and then the following shows up in the logs: All t... View more
Hallo Jamfnation i got a question: We have some macOS BigSur clients that are asking for the personal recovery key, most of them are M1 Macbook airs with standard users with a securetoken. It is totally at random so after a reboot or shutdown and the... View more
Issued a 2015 MacBook Air to a user. Her account is Standard. I created the account in System Preferences, and I'm positive her account is FileVault-enabled. She restarted her machine and the only account available was the Admin account that I used t... View more
Hi everyone, I am trying to confirm that the username on the computer is the same as the Filevault2 username in some kind of report. Currently if I navigate into the computer > Disk Description > FileVault 2 Enabled Users: Name Some computers have Fi... View more
Three of my remote MacOS users with AD accounts are unable to sync their filevault and AD creds. Typically we have users log into the VPN and then change passwords locally in syst prefs. In a couple of cases I have users who can’t seem to authenticat... View more
Hi all,Apologies in advance if this is a numpty question - I've avoided centrally managing FileVault for as long as I've been managing macOS because of its oddities, but recently I had a rush of blood to the head (after being glared at by our CyberSe... View more
I cant login to one of the mac laptop which is encrypted. If i check the mac on jamf it shows Personal Recovery Key Validation is UNKOWN. I have created a policy on jamf to create a local admin account on that mac by following this https://www.jamf.c... View more
Hi there I need some help please. I have an Extension attribute and Smart group to show me all users where the SecureToken is Disabled. We have a management account whereby in terminal you can manually give a ST to someone that does not have a ST usi... View more
Background: We currently apply a configuration profile to enforce FileVault, with a personal recovery key and redirection payload. We use DEP and create local user accounts, we're not AD bound or using Jamf connect etc. as yet. We create an admin sup... View more
Hi All, This worked for me...Hence I am sharing this to all the admins out there who is looking for a permanent solution of never ending AD Password Sync Issue with FileVault..First let's spit the scenarios..Scenario 1 (Mac User who is aware of his/h... View more
Hi All, Is anybody using Trend for disk encryption and specifically storing their recovery keys with Trend instead of Jamf Pro. What were your experiences with Trend as opposed to using Jamf and config profiles to turn on FV2. ThanksSimon View more
I'm looking at our lifecycle management for Macs. I've seen people deleting the records in Jamf but keeping track in asset management tools. We recently switched to Jamf for encryption management so the key is gone when we delete the record. I'm thin... View more
Hello,I work in a K-8 school district and we use Jamf Connect with Google as the IdP. We are starting to look at the new M1 MacBook Airs since that's what is now available (these will even be our first USB-C MacBook Airs) and have come to find that t... View more
since dell ddpe is not available for big sur, how do we manage and store the filevault encrpytion keys to jamf ? we used ddpe to store the keys and to handle USB encryption with windows formatted usb drives. View more
Hi, I need some help on this.We would like to finally make the step to a truly zero touch workflow.We hav a PreStage which successfully creates a local admin and a local (standrad-) user as shown below. Now with macOS Big Sur the standard user gets a... View more
We have a user with a 2019 MacBook Pro that reported that she could no longer log in. The failure is happening at the FileVault authentication prompt on bootup, and it appears to have been triggered by the Big Sur 11.2.3 update. (Last report to Jamf ... View more
Hello folks. Sorry for dredging up Filevault processes again, but I'm sort of in a muddle. Our situation/requirements are currently thus (for intel and M1 Macbooks): The Macbooks are bound to AD Once domain-joined, the Macbook owner will have a non-a... View more
In our Prestage we set an Local Admin account as below On ADE setup, users creates account, DEPnotify comes on and installs apps. On Completion DEPNotify is with Restart button. User clicks Restart and is prompted for their pwd to enable FileVault fo... View more
Hey all - merry monday! I'm having an issue with enabling FileVault via a configuration profile that had previously worked, but since enrolling new devices through a new/updated pre-stage enrolment profile, has stopped working. The new pre-stage enro... View more
Dear all,I'm having a lot of trouble with some machines with File Vault 2 config profile and policy applied to enforce the enablement, however for like 5-6 machines for a total of about 30, File Vault 2 results disabled and the policy log says "FileV... View more
Hello Everyone, This might sound silly but how do you login do the hidden Admin account with random password on a machine on enrollment? Is the password stored somewhere or can you change the password somewhere before needing to manage the users mach... View more
Hi Everyone, Currently we have setup a config profile that creates a personal recovery key that uses the built in Escrow certificate from Jamf. My question is do we care about having a separate IRK? Previously we were using an IRK on Meraki. Also, wo... View more
Hi Everyone, We are in the process of migrating our users from Meraki to Jamf Pro. Users are already FV2 encrypted with an IRK. We'd like to use the escrow feature Jamf provides as it stores the key within Jamf. Do we need to decrypt the drives first... View more
We use Jamf for our Apple management but recently our organization got InTune running for the Windows folks. It was asked if Intune can be used for the Apple devices to which I'm aware that jamf can tie into it. I just don't know the extent of that a... View more
We've been noticing a trend of machines with a valid recovery key suddenly transitioning from valid to invalid. We monitor this with 3 smartgroups via email notificationsFV2 key is knownFV2 PRK is known, key is unknownFV2 key is unknown. When a devic... View more
I have a number of machines running Catalina that have encrypted with an invalid PRK. I would like to run a script that will reissue a new recovery key, but as the current PRK is invalid and the Management account is not enabled, The key reissue will... View more
dear all,I've successfully enabled FileVault 2 using institutional recovery key but before deploying the policy and config profile for all the computer (none of them already have filevault enabled) I would like to test the recovery method and ensure ... View more
Hi All, we have our setup the following: Automated Device Enrolment (creates Local Admin Account)Jamf Login - O365 - all users are standard users. Policy to set FileVault at next logout. This is set by a policy defined in 'Policies'. I am now getting... View more