Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.sys.mac.system > #95844

Re: I though File Encryption was the default.

From Jolly Roger <jollyroger@pobox.com>
Newsgroups comp.sys.mac.system
Subject Re: I though File Encryption was the default.
Date 2016-10-20 15:49 +0000
Organization People for the Ethical Treatment of Pirates
Message-ID <e6s7coFofieU7@mid.individual.net> (permalink)
References <347941545.498609908.462536.elfinarc6-gmail.com@news.individual.net> <slrno0gjcf.8s8.g.kreme@snow.local> <499109438.498633962.563480.elfinarc6-gmail.com@news.individual.net>

Show all headers | View raw


On 2016-10-20, ElfinArc <elfinarc6@gmail.com> wrote:
> Lewis <g.kreme@gmail.com.dontsendmecopies> wrote:
>> In message <347941545.498609908.462536.elfinarc6-gmail.com@news.individual.net> 
>>   ElfinArc <elfinarc6@gmail.com> wrote:
>> 
>>> Brought up a new Mac Mini today, the base model with a spinning
>>> drive.  I noticed that File Encryption wasn't on by default.  Seems
>>> odd as I remember my MacBook Retina had that on as the default.
>> 
>> No. First off, file encryption is something you would do manually on
>> a file. If you mean FileVault that is DISK encryption, and has never
>> been required.
>
> Yeah, my bad. I meant File Vault. I know it isn't required, but my
> MacBook asked during setup, the Mini didn't.

IIRC, the macOS setup assistant didn't start asking about FileVault
until 10.10 (Yosemite), and apparently only asks on *laptop* models for
whatever reason. But if setup assistant doesn't ask, you can still use
System Preferences > Security > FileVault to set it up manually. 

There are apparently several conditions where the setup assistant won't
ask the user to enable FileVault full disk encryption (FDE):

# strings /System/Library/CoreServices/Setup\ Assistant.app/Contents/SharedSupport/MiniLauncher | grep "FDE upsell"

Skipping FDE upsell,  machine is not a portable
Skipping FDE upsell, unable to inspect cpu features
Skipping FDE upsell, unable to gather cpu features
Skipping FDE upsell, CPU doesn't have AES instruction set
Skipping FDE upsell, somehow running buddy on a disk image
Skipping FDE upsell, not an internal volume
Skipping FDE upsell, not a single user system
Skipping FDE upsell, root disk is not a CSLV
Skipping FDE upsell, root disk is already FDE
Skipping FDE upsell, system was opted out via Device Enrollment Program
setting
Skipping FDE upsell, already occurred for this volume and user
Skipping FDE upsell, user home volume is separate from the system volume
Skipping FDE upsell, not logged into iCloud

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR

Back to comp.sys.mac.system | Previous | NextPrevious in thread | Next in thread | Find similar


Thread

I though File Encryption was the default. ElfinArc <elfinarc6@gmail.com> - 2016-10-19 17:54 -0500
  Re: I though File Encryption was the default. nospam <nospam@nospam.invalid> - 2016-10-19 18:56 -0400
  Re: I though File Encryption was the default. Alan Browne <alan.browne@freelunchvideotron.ca> - 2016-10-19 19:04 -0400
  Re: I though File Encryption was the default. Lewis <g.kreme@gmail.com.dontsendmecopies> - 2016-10-20 04:52 +0000
    Re: I though File Encryption was the default. ElfinArc <elfinarc6@gmail.com> - 2016-10-20 08:26 -0500
      Re: I though File Encryption was the default. Jolly Roger <jollyroger@pobox.com> - 2016-10-20 15:49 +0000
      Re: I though File Encryption was the default. Lewis <g.kreme@gmail.com.dontsendmecopies> - 2016-10-20 19:04 +0000
  Re: I though File Encryption was the default. Michael Vilain <mev94303y@yahoo.com> - 2016-10-19 23:40 -0700
  Re: I though File Encryption was the default. Jolly Roger <jollyroger@pobox.com> - 2016-10-20 15:36 +0000
    Re: I though File Encryption was the default. ElfinArc <elfinarc6@gmail.com> - 2016-10-20 13:37 -0500
      Re: I though File Encryption was the default. Jolly Roger <jollyroger@pobox.com> - 2016-10-20 18:46 +0000

csiph-web