Posted on 05-14-2019 02:05 PM
Even though I have it configured as such, users are prompted with where they want to store their Recovery Keys. Let's figure out why!
Posted on 05-14-2019 02:28 PM
Can you provide a screenshot of what the users see? If you're enabling FileVault by instructing a user to visit System Preferences, then it's expected for the user to have 2 options: store the key in Jamf, or don't store the key anywhere.
If you don't want the user to have to choose anything, I would turn on deferred enablement so that the user is prompted to enter their password to enable FileVault (and automatically escrow the key in Jamf) at logout or the next login. You could also script enabling FV via a policy as well.