New Touchbar Macs Showing as FV encrypted in JSS

The T2 chip is encrypted automatically causing the false positive. Jamf is aware of the issue. if you use any sort of Extension Attribute use this instead:

#!/bin/sh

filevault=`fdesetup status` 
echo "<result>$filevault</result>"

Cheers Joe, suspected it was T2 related.

Thanks for the info!

Were you able to get encryption to start?

I came here to post the same thing. In my case, even after adjusting the criteria to make these systems fall into the unencrypted smart group and running our deployment to enable FileVault the encryption process isn't starting. The deployment completes successfully and reboots, when logging in we're prompted if we want to enable FileVault and when we select to enable it just takes us to the desktop and encryption never starts.

@jcafarelli I haven't received one of the 2018 MBPs to test yet, but with the T2 chip being encrypted all the time I thought the FV2 "encryption process" was just updating to the new encryption key, and there was no longer a distinct step of encrypting the drive.

You still need FileVault so that the machines need a password to decrypt.

Apple still recommend turning on FileVault: https://support.apple.com/en-gb/HT208344

@ jcafarelli , Not had any issues with enabling FileVault, it was just getting the Macs into the smart groups.