{"id":39241,"date":"2024-02-28T11:30:26","date_gmt":"2024-02-28T11:30:26","guid":{"rendered":"https:\/\/www.applivery.com\/?post_type=docs&#038;p=39241"},"modified":"2025-12-16T10:59:28","modified_gmt":"2025-12-16T10:59:28","password":"","slug":"managing-filevault","status":"publish","type":"docs","link":"https:\/\/www.applivery.com\/pt-br\/docs\/mobile-device-management\/apple-mdm\/macos\/managing-filevault\/","title":{"rendered":"Managing FileVault"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"39241\" class=\"elementor elementor-39241\" data-elementor-post-type=\"docs\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d586fdb e-con-full e-flex e-con e-parent\" data-id=\"d586fdb\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a19b8a4 elementor-widget elementor-widget-text-editor\" data-id=\"a19b8a4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><strong>FileVault<\/strong>, available in macOS 10.3 and newer versions, encrypts your entire disk to safeguard your data and prevent unauthorized access on your Mac.<\/p><p>Once enabled, you&#8217;ll need a <strong>Password<\/strong> or <strong>Recovery Key<\/strong> to access your device, ensuring your data remains secure and inaccessible without proper authentication. FileVault also automatically encrypts all new files, providing continuous protection.<\/p><p>Enabling FileVault is a useful configuration to protect your data in case your Mac is lost or damaged.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0f1e58f elementor-alert-info elementor-widget elementor-widget-alert\" data-id=\"0f1e58f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"alert.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-alert\" role=\"alert\">\n\n\t\t\t\t\t\t<span class=\"elementor-alert-title\">Note<\/span>\n\t\t\t\n\t\t\t\t\t\t<span class=\"elementor-alert-description\">Once configured, deleting the policy or disassociating devices <strong>will not turn off FileVault<\/strong>.<\/span>\n\t\t\t\n\t\t\t\t\t\t<button type=\"button\" class=\"elementor-alert-dismiss\" aria-label=\"Dismiss this alert.\">\n\t\t\t\t\t\t\t\t\t<span aria-hidden=\"true\">&times;<\/span>\n\t\t\t\t\t\t\t<\/button>\n\t\t\t\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fa4143e elementor-widget elementor-widget-text-editor\" data-id=\"fa4143e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>With Applivery, you have two options for recovery key management (being able to choose how the recovery key is encrypted and recovered):<\/p><ul><li><strong>Auto<\/strong> (recommended): Applivery will handle the necessary certificates. The recovery key will be displayed in the device settings.<\/li><li><strong>Manual<\/strong>: You will need to upload the public key. Later, you can download the encrypted recovery key and decrypt it on your device using the private key.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-40c1c7f elementor-widget elementor-widget-heading\" data-id=\"40c1c7f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Recovery key management - Auto<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6af998c elementor-widget elementor-widget-text-editor\" data-id=\"6af998c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Navigate to your <strong>Device Management<\/strong> section, and select <strong>Policies<\/strong> <span style=\"color: #ff0000;\">(1)<\/span>. Choose the policy where you want to integrate FileVault.<\/p><p>From the left-hand menu, navigate to the\u00a0<strong>+ Add configuration<\/strong>\u00a0<span style=\"color: #ff0000;\">(2)<\/span> option and type <strong>FileVault<\/strong>\u00a0into the search bar\u00a0<span style=\"color: #ff0000;\">(3)<\/span>, then <span class=\"button-edit\">+ Add<\/span> <span style=\"color: #ff0000;\">(4)<\/span> this configuration.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a1fa0c3 elementor-widget elementor-widget-image\" data-id=\"a1fa0c3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"509\" src=\"https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-122653-1024x651.png\" class=\"attachment-large size-large wp-image-41531\" alt=\"filevault-auto-1\" srcset=\"https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-122653-1024x651.png 1024w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-122653-300x191.png 300w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-122653-768x488.png 768w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-122653-1536x977.png 1536w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-122653-2048x1302.png 2048w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8220122 elementor-widget elementor-widget-text-editor\" data-id=\"8220122\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>In the <strong>Main<\/strong> <span style=\"color: #ff0000;\">(5)<\/span> menu, you will need to <strong>Enable<\/strong> <span style=\"color: #ff0000;\">(6) <\/span>FileVault on Mac devices and select the <strong>Defer<\/strong> <span style=\"color: #ff0000;\">(7)<\/span> option, which postpones enabling FileVault until the user logs out. Additionally, check the <strong>Show Recovery Key<\/strong> <span style=\"color: #ff0000;\">(8)<\/span> option to display it later.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0bee339 elementor-widget elementor-widget-image\" data-id=\"0bee339\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"509\" src=\"https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-124102-1024x651.png\" class=\"attachment-large size-large wp-image-41534\" alt=\"filevault-auto-2\" srcset=\"https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-124102-1024x651.png 1024w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-124102-300x191.png 300w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-124102-768x488.png 768w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-124102-1536x977.png 1536w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-124102-2048x1302.png 2048w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-57dfa3d elementor-widget elementor-widget-image\" data-id=\"57dfa3d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"509\" src=\"https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-123947-1024x651.png\" class=\"attachment-large size-large wp-image-41537\" alt=\"filevault-auto-3\" srcset=\"https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-123947-1024x651.png 1024w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-123947-300x191.png 300w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-123947-768x488.png 768w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-123947-1536x977.png 1536w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-123947-2048x1302.png 2048w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-890dac0 elementor-widget elementor-widget-text-editor\" data-id=\"890dac0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>In the <strong>Options<\/strong>\u00a0<span style=\"color: #ff0000;\">(9)<\/span> menu, select <strong>Don&#8217;t Allow FDE Disable<\/strong> <span style=\"color: #ff0000;\">(10)<\/span> to prevent FileVault from being disabled.\u00a0<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ff819d7 elementor-widget elementor-widget-image\" data-id=\"ff819d7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"509\" src=\"https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-124901-1024x651.png\" class=\"attachment-large size-large wp-image-41540\" alt=\"filevault-auto-4\" srcset=\"https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-124901-1024x651.png 1024w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-124901-300x191.png 300w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-124901-768x488.png 768w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-124901-1536x977.png 1536w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-124901-2048x1302.png 2048w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2b08dc8 elementor-widget elementor-widget-text-editor\" data-id=\"2b08dc8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>In the <strong>Recovery<\/strong> <span style=\"color: #ff0000;\">(11)<\/span> menu, leave the <strong>Auto<\/strong> <span style=\"color: #ff0000;\">(12)<\/span> option selected. Applivery will handle the necessary certificates, and the recovery key will be displayed in the device settings.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f26d336 elementor-widget elementor-widget-image\" data-id=\"f26d336\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"509\" src=\"https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-131624-1024x651.png\" class=\"attachment-large size-large wp-image-41546\" alt=\"filevault-auto-5\" srcset=\"https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-131624-1024x651.png 1024w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-131624-300x191.png 300w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-131624-768x488.png 768w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-131624-1536x977.png 1536w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-131624-2048x1302.png 2048w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5389505 elementor-widget elementor-widget-text-editor\" data-id=\"5389505\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>After saving and updating the policy, the user will need to log out. Upon the next login, the FileVault activation forms will appear.<\/p><p>On the <a href=\"https:\/\/dashboard.applivery.io\/\">Applivery Dashboard<\/a>, navigate to the <strong>Devices<\/strong> <span style=\"color: #ff0000;\">(13)<\/span> section and select the device from which you want to obtain the recovery key.<\/p><p>Go to the <strong>Settings<\/strong> <span style=\"color: #ff0000;\">(14)<\/span> <strong>&gt;<\/strong> <strong>FileVault<\/strong> <span style=\"color: #ff0000;\">(15)<\/span> section and click on the <span class=\"button-edit\">Reveal<\/span> button <span style=\"color: #ff0000;\">(16)<\/span> to retrieve the recovery key for your device.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0f99538 elementor-widget elementor-widget-image\" data-id=\"0f99538\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"509\" src=\"https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-141422-1024x651.png\" class=\"attachment-large size-large wp-image-41549\" alt=\"filevault-auto-6\" srcset=\"https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-141422-1024x651.png 1024w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-141422-300x191.png 300w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-141422-768x488.png 768w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-141422-1536x977.png 1536w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-141422-2048x1302.png 2048w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4c5c57f elementor-widget elementor-widget-heading\" data-id=\"4c5c57f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Recovery key management - Manual<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7ebaedf elementor-widget elementor-widget-heading\" data-id=\"7ebaedf\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Step 1 - Create certificate for FileVault Recovery Key encryption<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8c3769a elementor-widget elementor-widget-text-editor\" data-id=\"8c3769a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>To encrypt the Recovery Key, an\u00a0<strong>encryption certificate<\/strong> must be created and uploaded to Applivery.<\/p><p>On a macOS computer (10.8+), open\u00a0<strong>Terminal<\/strong>\u00a0and execute the command:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-274f396 elementor-widget elementor-widget-code-highlight\" data-id=\"274f396\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"code-highlight.default\">\n\t\t\t\t\t\t\t<div class=\"prismjs-default copy-to-clipboard \">\n\t\t\t<pre data-line=\"\" class=\"highlight-height language-javascript \">\n\t\t\t\t<code readonly=\"true\" class=\"language-javascript\">\n\t\t\t\t\t<xmp>openssl req -x509 -nodes -newkey rsa:2048 -keyout private.pem -out public.der -days 365 -outform der<\/xmp>\n\t\t\t\t<\/code>\n\t\t\t<\/pre>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-51cecbe elementor-widget elementor-widget-text-editor\" data-id=\"51cecbe\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>This will generate a public key in <code>.der<\/code> format.<\/p><p>After creating the certificate, go to the <a href=\"https:\/\/dashboard.applivery.io\/\">Applivery Dashboard<\/a>\u00a0and navigate to\u00a0<span style=\"font-weight: bolder;\">Device Management &gt; Assets <\/span><span style=\"color: #ff0000;\">(1)<\/span>, then navigate to the <strong>Certificates<\/strong> <span style=\"color: #ff0000;\">(2)<\/span> section and click on <span class=\"button-add\">+ Upload Certificate<\/span>\u00a0<span style=\"color: #ff0000;\">(3)<\/span>.<\/p><p>A modal view will appear, allowing you to upload the newly created certificate by clicking on the <span class=\"button-edit\">Select file<\/span> <span style=\"color: #ff0000;\">(4)<\/span> button and loading it from your drive.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0d3237c elementor-widget elementor-widget-image\" data-id=\"0d3237c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"509\" src=\"https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-28-at-095148-1024x651.png\" class=\"attachment-large size-large wp-image-39298\" alt=\"filevault-manual-1\" srcset=\"https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-28-at-095148-1024x651.png 1024w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-28-at-095148-300x191.png 300w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-28-at-095148-768x488.png 768w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-28-at-095148-1536x977.png 1536w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-28-at-095148-2048x1302.png 2048w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0ea333f elementor-widget elementor-widget-heading\" data-id=\"0ea333f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Step 2 - Configure policy<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5a8f61e elementor-widget elementor-widget-text-editor\" data-id=\"5a8f61e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Now, it&#8217;s time to begin configuring your FileVault policy.<\/p><p>You will need to perform the same configurations you did in Auto mode for the Main and Options menus. <strong>Only the settings for the Recovery menu will be modified<\/strong>.<\/p><p>This time, you will select <strong>Manual<\/strong> <span style=\"color: #ff0000;\">(5)<\/span> for recovery key management. In the <strong>Encrypt Cert Payload UUID<\/strong> <span style=\"color: #ff0000;\">(6)<\/span> field, you will load the certificate previously uploaded in the Certificates section.<\/p><p>Describe the <strong>Location<\/strong> <span style=\"color: #ff0000;\">(7) <\/span>field to indicate where the recovery key is stored, ensuring users know where to find it.<\/p><p>For the <strong>Device Key<\/strong> <span style=\"color: #ff0000;\">(8) <\/span>field, enter a string (help text) for users who may have forgotten their password. Site admins can use this key to locate the escrowed key for the specific device. This key supersedes the <code>RecordNumber<\/code> key used in the previous escrow mechanism. If the key is absent, the device serial number is used instead.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-dc44b59 elementor-widget elementor-widget-image\" data-id=\"dc44b59\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"509\" src=\"https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-142502-1024x651.png\" class=\"attachment-large size-large wp-image-41552\" alt=\"filevault-manual-2\" srcset=\"https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-142502-1024x651.png 1024w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-142502-300x191.png 300w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-142502-768x488.png 768w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-142502-1536x977.png 1536w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-142502-2048x1302.png 2048w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f03b730 elementor-widget elementor-widget-heading\" data-id=\"f03b730\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Step 3 - What happens at the device end<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8c678bd elementor-widget elementor-widget-text-editor\" data-id=\"8c678bd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>After saving and updating the policy on the terminal, the user will need to log out.<\/p><p>Upon the next login, the FileVault activation forms will appear. Once completed, send an <strong>Update status<\/strong> command, and you will then have the encrypted key available on the device under the <strong>FDE Personal Recovery Key CMS<\/strong> field.<\/p><p>Once the policy is applied, users will not be able to modify the FileVault settings under <strong>System Preferences &gt; Security &amp; Privacy &gt; FileVault<\/strong>. The settings as configured in the policy will be enforced.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3211779 elementor-alert-info elementor-widget elementor-widget-alert\" data-id=\"3211779\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"alert.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-alert\" role=\"alert\">\n\n\t\t\t\t\t\t<span class=\"elementor-alert-title\">Note<\/span>\n\t\t\t\n\t\t\t\t\t\t<span class=\"elementor-alert-description\">Applying another FileVault policy to an already encrypted device has no effect.<\/span>\n\t\t\t\n\t\t\t\t\t\t<button type=\"button\" class=\"elementor-alert-dismiss\" aria-label=\"Dismiss this alert.\">\n\t\t\t\t\t\t\t\t\t<span aria-hidden=\"true\">&times;<\/span>\n\t\t\t\t\t\t\t<\/button>\n\t\t\t\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d0adc7b elementor-widget elementor-widget-heading\" data-id=\"d0adc7b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Step 4 - Retrieving the Recovery Key<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-91b7001 elementor-widget elementor-widget-text-editor\" data-id=\"91b7001\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\tOn the <a href=\"https:\/\/dashboard.applivery.io\/\">Applivery Dashboard<\/a>, navigate to the <strong>Devices<\/strong> <span style=\"color: #ff0000;\">(9)<\/span> section and select the device from which you want to obtain the recovery key.\n\nGo to the <strong>Settings<\/strong> <span style=\"color: #ff0000;\">(10)<\/span> <strong>&gt;<\/strong> <strong>FileVault<\/strong> <span style=\"color: #ff0000;\">(11)<\/span> section and click on the <span class=\"button-edit\">Download encrypted file<\/span> button <span style=\"color: #ff0000;\">(12)<\/span>.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-31e13dc elementor-widget elementor-widget-image\" data-id=\"31e13dc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"509\" src=\"https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-141939-1024x651.png\" class=\"attachment-large size-large wp-image-41555\" alt=\"filevault-manual-3\" srcset=\"https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-141939-1024x651.png 1024w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-141939-300x191.png 300w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-141939-768x488.png 768w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-141939-1536x977.png 1536w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/Screenshot-2024-05-06-at-141939-2048x1302.png 2048w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e76728b elementor-widget elementor-widget-text-editor\" data-id=\"e76728b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>A <code>.dat<\/code> file will be downloaded and you will need to execute the following command to decrypt the key:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3938838 elementor-widget elementor-widget-code-highlight\" data-id=\"3938838\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"code-highlight.default\">\n\t\t\t\t\t\t\t<div class=\"prismjs-default copy-to-clipboard \">\n\t\t\t<pre data-line=\"\" class=\"highlight-height language-javascript \">\n\t\t\t\t<code readonly=\"true\" class=\"language-javascript\">\n\t\t\t\t\t<xmp>openssl cms -decrypt -in recovery.dat -inform DER -inkey filevault_privateKey.pem<\/xmp>\n\t\t\t\t<\/code>\n\t\t\t<\/pre>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-46ba01e elementor-alert-info elementor-widget elementor-widget-alert\" data-id=\"46ba01e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"alert.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-alert\" role=\"alert\">\n\n\t\t\t\t\t\t<span class=\"elementor-alert-title\">Note<\/span>\n\t\t\t\n\t\t\t\t\t\t<span class=\"elementor-alert-description\">The FileVault Recovery Key cannot be retrieved if the device was encrypted prior to enrollment or before a FileVault policy was applied to it.<\/span>\n\t\t\t\n\t\t\t\t\t\t<button type=\"button\" class=\"elementor-alert-dismiss\" aria-label=\"Dismiss this alert.\">\n\t\t\t\t\t\t\t\t\t<span aria-hidden=\"true\">&times;<\/span>\n\t\t\t\t\t\t\t<\/button>\n\t\t\t\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-349e42c elementor-widget elementor-widget-heading\" data-id=\"349e42c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Troubleshooting<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-044b97f elementor-widget elementor-widget-heading\" data-id=\"044b97f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Weird or unreadable characters when displaying the FileVault Recovery Key\n<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7594150 elementor-widget elementor-widget-text-editor\" data-id=\"7594150\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>If the FileVault Recovery Key is displayed with strange or unreadable characters, it usually means the device was already encrypted before being enrolled in Applivery. In this scenario, Applivery is retrieving the previously encrypted recovery key, not a newly generated one.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-35fe97e elementor-widget elementor-widget-image\" data-id=\"35fe97e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"521\" src=\"https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/encription-1024x667.png\" class=\"attachment-large size-large wp-image-73009\" alt=\"encription-before-applivery\" srcset=\"https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/encription-1024x667.png 1024w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/encription-300x195.png 300w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/encription-768x500.png 768w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/encription-1536x1000.png 1536w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/encription-2048x1333.png 2048w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/02\/encription-360x234.png 360w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-caa74ea elementor-widget elementor-widget-text-editor\" data-id=\"caa74ea\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>To resolve this issue, follow these steps:<\/p><ol><li>Have the user manually disable FileVault on the device by going to <strong>System Settings<\/strong> &gt; <strong>Privacy &amp; Security<\/strong> &gt; <strong>FileVault<\/strong> &gt; <strong>Turn Off<\/strong>.<br \/><strong>This action must be performed by an administrator user on the Mac<\/strong>.<\/li><li>Once FileVault has been turned off, ask the user to <strong>log in again<\/strong> to the device.<\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ab916e8 elementor-widget elementor-widget-text-editor\" data-id=\"ab916e8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>After the next login, FileVault will generate a new recovery key, which will be properly managed and displayed by Applivery without formatting issues.<\/p><p>This process ensures that the recovery key is regenerated under Applivery management and can be correctly viewed and stored for future recovery scenarios.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>You can activate FileVault on your macOS devices to safeguard your data through disk encryption. Discover how to set it up using Applivery Apple Device Management.<\/p>\n","protected":false},"author":5,"featured_media":32390,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","format":"standard","meta":{"content-type":"","inline_featured_image":false,"footnotes":""},"product":[315],"doc_category":[332],"doc_tag":[],"class_list":["post-39241","docs","type-docs","status-publish","format-standard","has-post-thumbnail","hentry","product-apple-mdm","doc_category-macos"],"aioseo_notices":[],"year_month":"2026-05","word_count":971,"total_views":"2397","reactions":{"happy":"0","normal":"0","sad":"0"},"author_info":{"name":"Karla Makowski","author_nicename":"karla-makowski","author_url":"https:\/\/www.applivery.com\/pt-br\/blog\/author\/karla-makowski\/"},"doc_category_info":[{"term_name":"macOS","term_url":"https:\/\/www.applivery.com\/docs\/mobile-device-management\/apple-mdm\/macos\/"}],"doc_tag_info":[],"knowledge_base_info":[],"knowledge_base_slug":[],"_links":{"self":[{"href":"https:\/\/www.applivery.com\/pt-br\/wp-json\/wp\/v2\/docs\/39241","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.applivery.com\/pt-br\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/www.applivery.com\/pt-br\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/www.applivery.com\/pt-br\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.applivery.com\/pt-br\/wp-json\/wp\/v2\/comments?post=39241"}],"version-history":[{"count":14,"href":"https:\/\/www.applivery.com\/pt-br\/wp-json\/wp\/v2\/docs\/39241\/revisions"}],"predecessor-version":[{"id":73016,"href":"https:\/\/www.applivery.com\/pt-br\/wp-json\/wp\/v2\/docs\/39241\/revisions\/73016"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.applivery.com\/pt-br\/wp-json\/wp\/v2\/media\/32390"}],"wp:attachment":[{"href":"https:\/\/www.applivery.com\/pt-br\/wp-json\/wp\/v2\/media?parent=39241"}],"wp:term":[{"taxonomy":"product","embeddable":true,"href":"https:\/\/www.applivery.com\/pt-br\/wp-json\/wp\/v2\/product?post=39241"},{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/www.applivery.com\/pt-br\/wp-json\/wp\/v2\/doc_category?post=39241"},{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/www.applivery.com\/pt-br\/wp-json\/wp\/v2\/doc_tag?post=39241"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}