Clik here to view.
“Managing FileVault 2 on OS X Mountain Lion with the Casper Suite” session...
JAMF Software has posted the session video for my Managing FileVault 2 on OS X Mountain Lion with the Casper Suite session from JAMF Nation User Conference 2012. For those interested, there’s a...
View ArticleClik here to view.
Credant Enterprise Edition for Mac adds FileVault 2 support
Credant has added support for managing FileVault 2-encrypted Macs to Credant Enterprise Edition for Mac 7.5.x. Based on my working with it over the past couple of weeks, it looks like a solid solution...
View ArticleClik here to view.
First look at Crypt
Since the release of Google’s Cauliflower Vest, one of the wishlist items that a number of Mac admins have wanted is to use Cauliflower Vest’s capabilities without needing to use Google App Engine as...
View ArticleClik here to view.
Using Apple’s Internet Recovery to unlock or decrypt your FileVault...
One of the new features that appeared with Macs that shipped with Lion and Mountain Lion was Apple’s Internet Recovery. If you encounter a situation in which you cannot start from the Mac’s Recovery HD...
View ArticleClik here to view.
Updated FileVault 2 status scripts now available – now handles unencrypted...
I’ve updated the FileVault 2 status check scripts so that they’re now able to correctly handle unencrypted Fusion drives. The scripts should now report accurately on 10.8.x Macs that use Fusion drives,...
View ArticleClik here to view.
Slides from the FileVault 2 Session at MacIT 2013
For those who wanted a copy of my FileVault 2 talk at MacIT 2013, here are links to the slides in PDF and Keynote format. PDF: http://tinyurl.com/MacIT2013PDF Keynote slides:...
View ArticleClik here to view.
Booting into single-user mode on a FileVault 2-encrypted Mac
I recently communicated with a Mac admin who was concerned about using FileVault 2 in his environment because he didn’t want to lose access to tools like single-user mode. Like a number of Mac admins,...
View ArticleClik here to view.
FileVault Setup.app – local FileVault 2 encryption setup and enforcement
I was recently asked to help test a new utility called FileVault Setup for setting up and enforcing FileVault 2 encryption. It’s designed to be a user-friendly interface for Apple’s fdesetup tool on OS...
View ArticleClik here to view.
FileVault 2 session at Penn State MacAdmins Conference 2013
I’ll be speaking about FileVault 2 at the Penn State MacAdmins Conference 2013, which is being held from May 22nd – 24th, 2013 in State College. For those interested, my talk will be on Thursday, May...
View ArticleClik here to view.
Slides from the FileVault 2 Session at Penn State MacAdmins Conference 2013
For those who wanted a copy of my FileVault 2 session slides from Penn State’s MacAdmins Conference 2013, here are links to the slides in PDF and Keynote format. PDF document link:...
View ArticleClik here to view.
Standard user accounts in OS X 10.8.4 now blocked from decrypting FileVault...
One of the changes noted in Apple’s security notes about 10.8.4 and Security Update 2013-002 was this section: Disk Management Available for: OS X Mountain Lion v10.8 to v10.8.3 Impact: A local user...
View ArticleClik here to view.
Session videos available from Penn State MacAdmins Conference 2013
The good folks at Penn State have posted the session videos from the Penn State MacAdmins Conference 2013. The sessions slides and videos are all accessible from the Penn State MacAdmins’ Resources...
View ArticleClik here to view.
Mac OS X 10.8.4′s Recovery HD removes ability to decrypt FileVault...
To follow on to my earlier post about needing admin rights to decrypt FileVault 2 on Mac OS X 10.8.4, it appears that Mac OS X 10.8.4′s Recovery HD partition no longer can decrypt FileVault 2-encrypted...
View ArticleClik here to view.
Decrypting FileVault 2 on Mac OS X 10.8.4 – Unlock first, then decrypt
As a follow-up to my earlier post about not being able to decrypt FileVault 2 from the Recovery HD partition, it looks like Apple has changed the process for how decryption works. Previously, you could...
View ArticleClik here to view.
UUIDs, LDAP and FileVault 2
A little-known fact about FileVault 2 is that it uses the GeneratedUID user attribute (also known as a UUID) of an account to help identify enabled accounts. For example, when you run the fdesetup list...
View ArticleClik here to view.
Enabling FileVault 2 pre-boot login screen functions from the command line
There’s a couple of functions that you can enable on your Mac that will show up at the FileVault 2 pre-boot login screen. The two functions that I’m familiar with are the keyboard input menu and a...
View ArticleClik here to view.
Erasing a FileVault 2-encrypted Volume
On occasion, it’s necessary to erase a FileVault 2-encrypted volume. However, Disk Utility won’t let you erase or repartition until you unlock or decrypt. This can be an issue for a malfunctioning...
View ArticleClik here to view.
FileVault 2 on OS X 10.8.x is now FIPS 140-2 Compliant
Apple announced on Friday, June 28th that the FIPS 140-2 validations for the cryptographic modules used by iOS 6 and OS X 10.8.x have now been completed. This is significant news for Mac admins who...
View ArticleClik here to view.
Slides from the FileVault 2 Session at MacSysAdmin 2013
For those who wanted a copy of my FileVault 2 session slides from MacSysAdmin 2013, here are links to the slides in PDF and Keynote format. PDF document link: http://tinyurl.com/MacSysAd2013PDF Keynote...
View ArticleClik here to view.
Session videos and slides now available from MacSysAdmin 2013
The documentation from MacSysAdmin 2013 is now available, with the session slides and videos being accessible from the link below: http://documentation.macsysadmin.se The video of my session is...
View Article
