macOS High Sierra 10.13.1 - Modular Imaging through Jamf Imaging Filevault 2 takes 1 day

[ThijsX]

Hi,

Currently we are deploying macOS High Sierra via a deployment set with an APFS 10.13.1 .DMG file (created with autoDMG), what really works smooth but one thing is not working properly and that is;

Deployment set is done, packages are installed, firstboot script is finished, and then FileVault 2 is starting to encrypt which is fine but it will cost a day to fully encrypt the disk.

on macOS Sierra it will take like 80-120 minutes.

Anyone an idea about this or is this expected behaviour?

Greetings,
Thijs - bol.com

[remyb]

Hi Thijs,

We're seeing identical behaviour on our High Sierra machines.

[RobertHammen]

APFS has some performance issues with encryption. This is expected behavior.

BUT

On another front, if you are truly imaging these Macs, and have never run the High Sierra installer on them, they are NOT getting the correct firmware updates to officially support APFS and High Sierra. There's no official Apple method of doing so save for running the Install macOS High Sierra workflow, but you may want to read this: High Sierra Notes

This site may also be helpful: click here

[ThijsX]

@RobertHammen Thank you for the helpful information! We will dive into that.
Fact is, We have a Prestage enrollment but that is currently not meeting our requirements like binding to AD, setting static hostnames etc.

Cheers

[isterling_goaaa]

I'm also observing this behavior on my High Sierra machines. These are factory-new machines that have just been enrolled in Casper; our FileVault2 policy is the last one we run.

[ThijsX · Accepted solution]

@isterling.goaaa We are seeing that is much faster on newer hardware, 2017 models.

Cheers,
Thijs - bol.com