MacOS Monterey upgrade standard users that have Filevault2 enabled

[Mcleveland]

Hi everyone,

The majority of my end users are standard users with Filevault2 enabled. If they try to upgrade Monterey they get this message "You must provide authorization for this volume by setting it as your startup disk."

I have a self service policy that downloads MacOS Monterey 12.1 and then unpackages itself into their /Applications folder. Following that has a Files and processes payload with the executed line 

/Applications/Install\ macOS\ Monterey.app/Contents/Resources/startosinstall --agreetolicense --forcequitapps

 This is the feedback when going to logs in Jamf for each attempt: 

Result of command:
Error: failed to authorize for installation. Provide a password with --stdinpass or --passprompt.
By using the agreetolicense option, you are agreeing that you have run this tool with the license only option and have read and agreed to the terms.
If you do not agree, press CTRL-C and cancel this process immediately.

Can anyone help me out where I am supposed to the password and the management accounts username within the first executed line?

Thanks,
Michael 

[karthikeyan_mac · Accepted solution]

You can try as below 

echo 'password' | /Applications/Install\ macOS\ Monterey.app/Contents/Resources/startosinstall --agreetolicense --forcequitapps --user {user} --stdinpass

The below article provides more information on the same.

https://www.jamf.com/blog/reinstall-a-clean-macos-with-one-button/

[Mcleveland]

@karthikeyan_mac  Do I need to include the brackets when I am filling in the username of the management account?

[karthikeyan_mac]

No, I just added to show that as variable.

[daniel_ross]

I know a solution has been marked here but also thought I'd toss this option in that we use for all kinds of things:

https://github.com/grahampugh/erase-install

We use it for upgrades, reloads, and erasing computers to get them back to setup assistant.  It handles all the user information boxes and such and really makes it a white glove upgrade experience for users or in the case of our helpdesk team a breeze to reload loaner computers when they come back.