Skip to main content
Question

Jamf Pro Computer Extension Attribute - FileVault Decryption Status


Forum|alt.badge.img+18

Jamf Pro is really good at identifying and reporting on most things within OS X (macOS) and iOS. Unfortunately, Jamf Pro still doesn’t know everything. Lucky for us, we can teach this dog a new trick or two via Extension Attributes.

My recent challenge was to come up with a method to report against systems that are in a current state of decryption.

You might be thinking to yourself, “Jamf already knows how to report against this.” – You’re not wrong! But…

Jamf only let’s us know if a drive is decrypting. Unlike the encryption process, Jamf does not report the percentage complete of the decryption process.

So I wrote an Extension Attribute to meet this need.

Here's the full write up... http://www.cainehorr.com/jamf-pro-computer-extension-attribute-filevault-decryption-status/

Hope you find this Extension Attribute and workflow useful. Commentary is always welcome!

3 replies

Forum|alt.badge.img+18
  • Honored Contributor
  • 486 replies
  • January 30, 2018

Rich also has a great model the above will work, but come 10.13 moving to APFS its a bit different.

https://derflounder.wordpress.com/2017/11/13/apfs-encryption-status-check-script/

For filevault he has:
https://github.com/rtrouton/rtrouton_scripts/tree/master/rtrouton_scripts/Casper_Extension_Attributes/filevault_2_encryption_check


Forum|alt.badge.img+18
  • Author
  • Valued Contributor
  • 119 replies
  • January 31, 2018

@rderewianko - Thanks! Trouton's script is far more sophisticated than my trivial script - that's for certain!


Forum|alt.badge.img+18
  • Author
  • Valued Contributor
  • 119 replies
  • January 31, 2018

Took a look at Rich's script. I think I'll merge his into mine and that way it's backward compatible.


Reply


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings