Skip to main content
Question

need how-to for enabling FileVault 2 across all Macs

  • November 19, 2018
  • 3 replies
  • 29 views

Forum|alt.badge.img+6

I need to enable FileVault 2 on all of the Macs. Is there a good how-to on doing this? Is there a way to have a company-owned decryption key that can unlock the FV2 encrypted Macbook when the employee leaves and we don't have the user password?

3 replies

mark_mahabir
Forum|alt.badge.img+15
  • Jamf Heroes
  • November 19, 2018

This workflow still works for us.


Forum|alt.badge.img+14
  • Contributor
  • November 19, 2018

https://docs.jamf.com/10.5.0/jamf-pro/administrator-guide/Managing_Disk_Encryption_Configurations.html


Forum|alt.badge.img+18
  • Contributor
  • November 19, 2018

The only gotcha I would mention with the Jamf workflows is that if the user doesn't have a secure token for some reason, any attempt to enable FV will fail. I have yet to see a robust way of managing secure tokens to address issues with accounts being created or passwords changed in a way that leads to a disabled secure token.