Even though I have it configured as such, users are prompted with where they want to store their Recovery Keys. Let's figure out why!
+15Can you provide a screenshot of what the users see? If you're enabling FileVault by instructing a user to visit System Preferences, then it's expected for the user to have 2 options: store the key in Jamf, or don't store the key anywhere.
If you don't want the user to have to choose anything, I would turn on deferred enablement so that the user is prompted to enter their password to enable FileVault (and automatically escrow the key in Jamf) at logout or the next login. You could also script enabling FV via a policy as well.
Reply
Most helpful members this week
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.