FileVault - Some Users are not able to unlock the disk

ooshnoo
Valued Contributor

Hi

We are transitioning to enabling FileVault by Configuration Profile once Mac is enrolled via DEP.

All is well, except we cannot add other authorized users to fileVault using the FileVault System Preferences --> Enable Users button.

I just click the "Enable Users" button and it does nothing.

Any ideas??? What is best practice for getting an end user and a local admin account enabled for FileVault.

We are testing with Mojave 10.14.6

4 REPLIES 4

rmorris
New Contributor

Hi ooshnoo,

Did you resolve the above issue? I am new to JamfPro and I am seeing the same behavior.

Thanks
Rob

tjhall
Contributor III

This is usually down to the Mac's being imaged the old way which means the admin account wasn't provided with a secure token. There are possibly ways around it (good info here https://travellingtechguy.eu) but best way is to wipe and re-install MacOs from scratch using the MacOs installer (https://www.jamf.com/blog/reinstall-a-clean-macos-with-one-button/?keywords=eraseinstall)

maheshveldandi
New Contributor III

20fceb89f1b9469091dc11a78fa50cca

424ba0d4e84f48fe9487a959e3ab5dff

While turning on File-Vault getting error “there was a problem enabling FileVault’.One more error Defferred enablement appears to be activate for user '1-user'.. Suggest the ways to resolve the issue.

atomczynski
Valued Contributor

I was recently working on a machine where the Managed / Mobile user had the token but the local account did not.
I've used this script to pass the SecureToken to the local user.

https://github.com/koalatee/scripts/blob/master/jamf/NewUserSetupAPFS.sh

While this may not fix the root cause, you might be able to get by to make the device usable.