It looks like you are trying to add the portal after removing the old
Global Protect and before installing the new one. Does the plist exist
in that window? Would it work if you added the plist change after
installing the new version. Ideally delete ...
If you deployed FV2 to the user through the JSS and the JSS has the
encryption keys then you can create another policy scoped to those
machines which enables FV for the management account. It's under
policy>management account>enable user for filevaul...