Skip to main content
Question

_mbsetupuser and FileVault2 Configuration Profile

  • April 7, 2016
  • 3 replies
  • 21 views

Forum|alt.badge.img+4

We're using a Configuration Profile to enable FV2.

The problem is, during the first boot wizard sometimes the _mbsetupuser is the user it chooses for deferred encryption. If we go through the setup wizard and login fast enough (before the profiles are pushed down) then it seems to use the proper created user.

Have any of you encountered this issue or know a decent workaround?

3 replies

Forum|alt.badge.img+11
  • Valued Contributor
  • April 8, 2016

might be worth reading:
http://www.johnkitzmiller.com/blog/how-i-deploy-filevault-2/


Forum|alt.badge.img+4
  • Author
  • New Contributor
  • April 26, 2016

I opened a support ticket with Apple and they have confirmed and replicated the issue.

Hopefully this means they will fix it soonish.


Forum|alt.badge.img+9
  • Contributor
  • April 26, 2016

Just to play devil's advocate is there as reason you're doing it via Config Profile? You could easily take care of this via Policy. I'm not sure if the _mbsetupuser problem would appear or not, but the testing I've done doesn't seem to run into this issue. You'd also be able to set up a policy to run after that, as well, that would enable the Management Account for FV2.

Just a thought and my two cents :)
Good luck!
Chris