MacOS Monterey upgrade standard users that have Filevault2 enabled

Mcleveland
New Contributor III

Hi everyone,

The majority of my end users are standard users with Filevault2 enabled. If they try to upgrade Monterey they get this message "You must provide authorization for this volume by setting it as your startup disk."

 

I have a self service policy that downloads MacOS Monterey 12.1 and then unpackages itself into their /Applications folder. Following that has a Files and processes payload with the executed line 

/Applications/Install\ macOS\ Monterey.app/Contents/Resources/startosinstall --agreetolicense --forcequitapps

 This is the feedback when going to logs in Jamf for each attempt: 

Result of command:
Error: failed to authorize for installation. Provide a password with --stdinpass or --passprompt.
By using the agreetolicense option, you are agreeing that you have run this tool with the license only option and have read and agreed to the terms.
If you do not agree, press CTRL-C and cancel this process immediately.

Can anyone help me out where I am supposed to the password and the management accounts username within the first executed line?

Thanks,
Michael 

1 ACCEPTED SOLUTION

karthikeyan_mac
Valued Contributor

 

You can try as below 

 

echo 'password' | /Applications/Install\ macOS\ Monterey.app/Contents/Resources/startosinstall --agreetolicense --forcequitapps --user {user} --stdinpass

 

The below article provides more information on the same.

https://www.jamf.com/blog/reinstall-a-clean-macos-with-one-button/

 

View solution in original post

4 REPLIES 4

karthikeyan_mac
Valued Contributor

 

You can try as below 

 

echo 'password' | /Applications/Install\ macOS\ Monterey.app/Contents/Resources/startosinstall --agreetolicense --forcequitapps --user {user} --stdinpass

 

The below article provides more information on the same.

https://www.jamf.com/blog/reinstall-a-clean-macos-with-one-button/

 

Mcleveland
New Contributor III

@karthikeyan_mac  Do I need to include the brackets when I am filling in the username of the management account?

karthikeyan_mac
Valued Contributor

No, I just added to show that as variable.

daniel_ross
Contributor III

I know a solution has been marked here but also thought I'd toss this option in that we use for all kinds of things:

https://github.com/grahampugh/erase-install

We use it for upgrades, reloads, and erasing computers to get them back to setup assistant.  It handles all the user information boxes and such and really makes it a white glove upgrade experience for users or in the case of our helpdesk team a breeze to reload loaner computers when they come back.