Silent FileVault Activation

[tobiaslinder]

A client of mine wants to mass-rollout FileVault to all his users and was asking me if there is a silent way to roll it out (without the user ever seeing a box that tells him to enter a password or tells him that FileVault is now going to be activated.

Thanks for your ideas.

[davidacland]

I think you might be able to do that if you use institutional keys.

I've always avoided it though as it sets the same key on all devices.

[nvandam]

FileVault requires a restart, unless the machine is High Sierra and APFS.

[Quan_nong]

I dont think you can rollout without user interaction, since the user would need to enter their password to enable their account to be "Enabled to unlock FV2"