Error encrypting disk: Unknown error code 188 with FV2 on Casper 9.31

[narcisssjamf]

We've setup a Disk Encryption configuration and policy for FileVault2 (institutional key). We're intermittently getting the following error after imaging a system:
"Error encrypting disk: Unknown error code 188"

The policy trigger is set to "Recurring check-in" (every 5 mins) and the execution frequency is set to "Once per computer".

I've tried manually pushing the policy using the <sudo jamf policy -event "" -verbose> and <sudo jamf policy -none -verbose> commands but the policy isn't found.

When I tried to enable FileVault via System Preferences manually, an error came up stating that the boot drive config was corrupted.
Any ideas on what to do besides re-image and hoping for the best?...

[rtrouton · Accepted solution]

It sounds like your recovery partition isn't being created or is being created incorrectly as part of the imaging process. Having a working Recovery HD is a requirement for FileVault 2, so the encryption process will stop as a failsafe measure if it detects an absent or non-working Recovery HD.

For more details, see this thread:
https://jamfnation.jamfsoftware.com/discussion.html?id=7249

[narcisssjamf]

You're right!

I repaired/restored the Recovery HD and it successfully pulled the encryption policy.

Thanks!