Advanced Computer Searches

Sobchak
Contributor

We are trying to encrypt all of our Macs through Casper so that we can manage the filevault key. The problem is the Search seems off.

The current search is: FV2 Ind. Key and FV2

It looks like all partitions encrypted or boot partitions encrypted is what I want to see in the FV2 field. I assume I want to see Vaild in the FV2 Ind. Key field. The thing is sometimes I see invalid or unknown in the FV2 Ind. Key field but when I check the computer in Casper it has a filevault2 key.

Any ideas?

1 REPLY 1

nessts
Valued Contributor II

Invalid means the computer is encrypted but the JSS does not know its current key but it could be fixed just by generating a new key.
Unknown and encrypted means the computer was not encrypted by the JSS and just generating a new key is not going to help, you will have to decrypt and then encrypt through the policy you have in place.
There are some posts out there about generating new keys if you search the history.