New iMac hard drives in "decrypting" state per Casper

[dogle]

Hello all,

We have set up two new iMac devices and joined them to Casper. In Casper the hard drives on each are in the state of "FileVault2 Status: Decrypting", however, these machines are new out of the box and the FileVault2 encryption policy hasn't been run yet (and if it is FileVault2 isn't launched). Any ideas on why Casper would think the drives are decrypting out of the box?

Thanks!

Dogle

[hkim]

One way to really tell what it's doing, log into the machine, and do a

sudo fdesetup status

[dogle]

I attempt to perform that command in terminal but receive an error that the command doesn't exist.

[dogle]

We found a post about a problem with a fusion drive which indicates we can't defer. Does anyone know a workaround for this? We store the recovery keys in Casper..

[rtrouton]

If you're encrypting the iMacs and they have Fusion drives, you won't be able to use Casper's deferred encryption. It's not a Casper issue per-se, it's a bug in Apple's fdesetup tool. Casper uses fdesetup to encrypt Macs, so this bug affects Casper's encryption policies as well.

The best workaround would be to encrypt using the Casper management user instead of deferring it.

[Stefano]

Hi To all, we have a similar issue ("FileVault2 Status: Decrypting" in a brand new disk..where the disk is not encrypted, and the disk is not a fusion disk.
Which is the command that the Casper suite use to obtain this 'wrong' info ? /sdc