Skip to main content
Question

Boot process hangs with FV enabled on 10.11.x?

  • May 17, 2016
  • 6 replies
  • 29 views
C
Forum|alt.badge.img+17

I noticed my freshly imaged 10.11.4 computers were hanging on boot when FV was enabled.

To troubleshoot, if I do an erase and install of 10.11.5 and enable FV through system prefs - machine boots normally.

If I do an erase and install of 10.11.5 and run quickadd to get machine talking to JSS and then run our enable FV policy, FV enables fine, but on boot up after I enter the local admin password, the progress bar hangs about 55% of the way through.

If I let it sit there for 15 minutes and it never boots. If I tap the return key, booting happens as normal.

It happens on every boot. I assumed it was a networking issue, so I disabled all network interfaces & same result. Nothing jumps out at me in the system.log, not sure what other logging to look at.

Anyone seen this, or have any ideas? We are using institutional and individual recovery keys.

    6 replies

    bentoms
    Forum|alt.badge.img+35
    • bentoms
    • Hall of Fame
    • May 17, 2016

    @CasperSally I updated my FV2 Mac from 10.11.4 to 10.11.5 this AM.

    It went through fine.

    I'll await others to chime in though.

    A
    Forum|alt.badge.img+13

    Do you have any log in hook policies?

    C
    Forum|alt.badge.img+17
    • CasperSally
    • Author
    • Honored Contributor
    • May 17, 2016

    This is on new machines, nothing to do with latest update.

    I notice in 'all messages' log after I tap return button to get machine to boot, 'mcxalr{x}' mentions. Maybe it has something to do with machine getting managed/profiles. Will retest with JAMF with a machine that doesn't get profiles.

    C
    Forum|alt.badge.img+17
    • CasperSally
    • Author
    • Honored Contributor
    • May 17, 2016

    I think I tracked the issue down to custom plist config login window profile preference (AdminMayDisableMCX=true) to allow our technicians to disable profiles, on login they usually get attached pop up box but it's hanging the FV2 boot.

    at least I know the cause of it - almost none of our users are admins.

    A
    Forum|alt.badge.img
    • apschaner
    • New Contributor
    • July 18, 2016

    Hey CasperSally,

    I registered just for this thread! I also had this problem. I thought it was our A/V installing unsigned extensions causing SIP to act up but after tonnes of testing it came down to one profile that had that key in it.

    As soon as I removed AdminMayDisableMCX, our build and deploy process worked fine.

    I don't know why it breaks FileVault but at least wanted to chime in.

    SincerelyJoshin
    Forum|alt.badge.img+4

    Is AdminMayDisableMCX the only key you were managing on com.apple.loginwindow? Maybe you are also locking automatic login into a false state which was conflicting with FV's automatic login mechanism?

    Look into the DisableFDEAutoLogin key in com.apple.loginwindow.

    https://support.apple.com/en-us/HT202842

    Terms & ConditionsCookie settingsAccessibility statement