T2 chip smart group

[GiveEmHelms]

I am trying to create a report for a security audit coming up.

When looking at the filevault status on t2 computers its showing as not encrypted. However when you look at the computers it is showing filevault is enabled. From my understanding, computers with t2 chips are encrypted out of the box.

Is there a way to include the t2 in a search or is there a way to make it report that it is encrypted?

[psliequ]

Vote this up.

You can also use that diskutil like to build an extension attributte.

[HCSTech]

This may be more than you need but take the parts you want:
https://www.jamf.com/jamf-nation/discussions/33634/mac-activation-lock-status-script-ea

Specifically this part: This will report the chip type in the mac computer. IE.. T1, T2
Chip="$(system_profiler SPiBridgeDataType | awk -F: '/Model Name/ {print $NF}' | sed 's/^ *//')"

[brockwalters]

The Model Name field is no longer returned in the SPiBridgeDataType data type. What's the alternative?