FileVault Options Configuration

This configuration allows administrator to enable or disable FileVault and destroy FileVault key when the system goes into standby.

Applicable to: macOS 10.7+

Procedure

  1. Go to Configurations > +Add.
  2. Type FileVault in the search field, and then click the FileVault Options configuration.
  3. Enter a Name and Description of the configuration.
  4. In Configuration Setup, select the required options:
    • Destroy FileVault key when system goes into standby mode
    • Do not allow disabling Full Disk Encryption
    • Do not allow enabling Full Disk Encryption
  5. Click Next.
  6. Select Enable this configuration option.
  7. Select one of the following distribution options:
    • All Devices
    • No Devices (default)
    • Custom.
  8. Click Done.