search

rtrouton / rtrouton_scripts

Scripts to share
MIT License
1.3k stars 492 forks source link

Incorrectly reports as unencrypted drive #67

Closed shhtephe closed 4 years ago

shhtephe commented 4 years ago

Currently running 10.15.6. Script attempts to check for corestorage volume and fails. As such it reports "FileVault 2 Encryption Not Enabled" image

However, FileVault 2 is enabled and shows encrypted in both the system and in Jamf. image

image

This doesn't seem to be expected behavior. Glad to help with any testing you need to figure this out.

rtrouton commented 4 years ago

The script is working correctly, as FileVault encryption uses CoreStorage volumes on drives formatted with the HFS+ file system. The last OS which supported booting from HFS+ is macOS High Sierra 10.13.x.

Apple File System (APFS), which succeeded HFS+ as Apple’s default file system, has built-in native encryption capabilities and does not use Core Storage volumes for FileVault encryption.

I recommend transitioning to using this extension attribute instead: https://github.com/rtrouton/rtrouton_scripts/tree/master/rtrouton_scripts/Casper_Extension_Attributes/check_apfs_encryption