How do I roll out FileVault on Macs?
FileVault encrypts the hard drive on Mac devices so that data is unreadable without the correct password. deeploi enables it remotely across your fleet once you adjust your controls accordingly.
FileVault may cause a slight delay during system startup while the encrypted drive unlocks. This is normal.
How does the rollout work?
Once you turn on Device Encryption for macOS in Controls, deeploi enables FileVault on all connected Mac devices. Employees then complete one to three steps:
- Notification. Employees receive a prompt explaining that FileVault will be enabled on their Mac.
- Encryption initialization. The device encrypts its hard drive. Employees set their password when prompted. They can continue working during this process.
- Restart or log out. Employees must log out and back in, or restart, to complete the setup. This step is required for the device to appear as encrypted in the deeploi dashboard.
Recovery keys deeploi can only store recovery keys for devices where FileVault was enabled through the deeploi rollout. If an employee already activated FileVault independently before the rollout, their recovery key was not transferred to deeploi and cannot be retrieved through deeploi if needed.
How do I start the FileVault rollout?
- Click Controls in the left sidebar of the dashboard.
- Open Device Encryption.
- Turn it on for macOS.
- Click Save Changes.
deeploi then enables FileVault remotely on all connected Macs. Device Encryption is on by default. If it is already on, there is nothing to do. See Controls for how to check the status of each device.