FileVault Encryption for a secure macOS

FileVault is a security feature that encrypts data on macOS. It encrypts the data on the startup disk and prevents unauthorized access by anyone who doesn’t have the decryption key or the correct account login credentials. FileVault is not just another password protection security feature – while ordinary passwords prevent unauthorized access to a computer, they can be bypassed if a hacker removes the hard drive from a Mac and connects it to their computer as a secondary hard disk.

By enabling FileVault, it prompts the user to re-enter their password each time they log into their account. It not only encrypts data on the hard drive, but also allows authorized users who have a decryption key,  to read its contents. This makes the Mac immune to the malicious attacks.

FileVault is very useful for enterprises such as healthcare, manufacturing or banking that have highly sensitive customer information stored on their devices.

42Gears UEM allows IT administrators to remotely enable FileVault on Mac devices.

How to enable FileVault using SureMDM?

1. Login to SureMDM Web Console.

2. Click on Profiles.

3. Select macOS as the operating system.

4. Click on Add Profile.

5. Select FileVault and click on Configure.

6.  Give a name to the profile and enter a suitable path to define Path For Recovery Information Storage.

Example: /var/filevault.plist

Select 0 from the dropdown list as Max Bypass Attempts. (Max Bypass Attempts denotes the maximum number of times the user can bypass enabling the FileVault.

7. Click Save. Profile will be created.

8. Go back to SureMDM Home.

9. Select the macOS device and click Apply.

10. Select the saved profile and click Apply.

FileVault with the defined settings will be pushed to the selected macOS device. The end user will then get a prompt for applying FileVault encryption once they logout and login again.

Once the FileVault option is enabled, users will see the following message in Security and Privacy window.

To learn about more features in the 42Gears UEM suite, register for a free trial here.