Advanced Computer Search - Encryption Status

Sobchak
Contributor

I am trying to create an advanced computer search that will show me the status of Macs that have had encryption pushed to them. The criteria would be computers that have had the encryption policy assigned to them and the display would be the policy status (complete/fail/Not run yet). Is there a way to do that?

7 REPLIES 7

stevewood
Honored Contributor II
Honored Contributor II

@Sobchak the easiest way, while not an Advanced Search, would be to simply add the policy to your dashboard. The dashboard will show you numbers and you can click on them to see which fit your three categories:

optional image ALT text

Sobchak
Contributor

This is semi-helpful. It does not give me all the info an advanced search would. Like making sure the computer is currently properly encrypted.

With an advanced search I would make the search like this:
criteria
Has encryption policy
is not encrypted

display
computer name
encryption status
policy status
last inventory update

Just using the dashboard simply does not give me enough information to be useful in this case. That being said thank you for pointing out the dashboard I think it will be useful for other less complicated policy tracking.

mm2270
Legendary Contributor III

@Sobchak The information is already available for reporting. There are several ones, but I think the one you're looking for would be "FileVault 2 Status" Look for that item in the Criteria section, and it can be included as a column.
6f49eac060de449fbf66926fb0c9b7de

And when you click the ellipses...

23a24aac2d1a4dd4bd610380af029710

Sobchak
Contributor

I know this is available but its not all the info I want. I need the policy status as well so that we can track computers that have had the policy pushed and have not run it, or had the policy fail, or ran the policy and yet are not showing as encrypted with a vaild key.

mm2270
Legendary Contributor III

Ah, you want the policy status. Didn't realize that. Sorry, but that's not really available outside of the dashboard item that @stevewood mentioned above, which I agree is a pretty weak method. But hey, why not join the club in asking JAMF to make policy status available as something we can search on or build groups from?

Sobchak
Contributor

Already joined the club and posted a feature request: https://jamfnation.jamfsoftware.com/featureRequest.html?id=4507

mm2270
Legendary Contributor III

Right, forgot that was you. Lots going on on this front over the last couple of days.