FileVault Options Configuration
This configuration allows administrator to enable or disable FileVault and destroy FileVault key when the system goes into standby.
Applicable to: macOS 10.7+
Procedure
- Go to Configurations > +Add.
- Type FileVault in the search field, and then click the FileVault Options configuration.
- Enter a Name and Description of the configuration.
- In Configuration Setup, select the required options:
- Destroy FileVault key when system goes into standby mode
- Do not allow disabling Full Disk Encryption
- Do not allow enabling Full Disk Encryption
- Click Next.
- Select Enable this configuration option.
- Select one of the following distribution options:
- All Devices
- No Devices (default)
- Custom.
- Click Done.