What is Filevault?
In today's world, computer encryption is a standard practice in both business and education. Here at SNC, Windows devices are encrypted using Bitlocker, while Macs are encrypted using Filevault.
Filevault encrypts your Mac's hard drive by creating an encryption key that is known only to the device. This key is created when you enter your password into your device. FileVault uses an encryption method known as “XTS-AES-128 encryption with a 256-bit key” to encode the information on a disk. The key that is used would take more than a trillion years to break.
How to setup Filevault
When ITS enables encryption for your mac, you will be required to turn on Filevault the next time you restart your computer. After logging in you will be presented with the option to enable Filevault:
Click "Enable Now" to start the encryption process.
NOTE: If Filevault is declined, you will be required to enable the next time you restart, without the option to cancel.
Your Mac will begin the encryption process:
After Filevault has completed initialization you will be presented with a recovery key. This key is used if Filevault needs to be turned off, or you cannot login to your Mac due to an issue. Make sure to copy this code, or take a picture of it. If you forget the code, don't worry, ITS can assist you.
Congratulations! Your Mac is now successfully encrypted!
Logging in after encryption
When logging into your computer after it has been shut down fully or from hibernation, you are presented with a login screen that gives the option to choose who to login as:
To decrypt your computer, click on your name and enter your password.
NOTE: If you have recently changed your password, the encryption password may be your previous password. Jamf Connect will ask you to enter your current password to fix this issue.
After your computer decrypts, you will be presented with the standard Jamf Connect login screen:
To login, enter you email address and password. After you have completed this step you will be logged into your computer.