Recovery key: The key is a string of letters and numbers thats created for you keep a copy of the key somewhere other than your encrypted startup disk. In macOS 10.15, this includes both the system volume and the data volume. I assume when I finally install High Sierra, it won't need to re-encrypt the drive. The encrypted device must have an Intune FileVault policy for disk encryption. Escrow of keys enables Intune administrators to rotate keys to help protect devices, and users to recover a lost or rotated personal recovery key. FileVault encodes the information stored on your Mac, so that it can't be read unless the login password is entered. something went wrong. It allows you to protect the data on your Mac at no extra cost. Given that it runs in the background, theres no downtime due to the tool encrypting your data. Learn more about Apple's FileVault 2. Note: If you have an iMac Pro or another Mac with an Apple T2 Security Chip, the data on your drive is already encrypted automatically. We all know how important it is to protect your online privacy. Thanks, Jameson! for the best site experience. That means you can browse the internet anonymously, making you virtually untraceable. Why don't we use the 7805 for car phone chargers? Configure a FileVault setting in Apple Business Essentials Use FileVault to Get Full Disk Encryption in Mac OS X From the policy: ASSET CONTROL POLICY DETAILS Definition of assets Assets can be defined both PURPOSE This policy from TechRepublic Premium provides guidelines for the reporting of information security incidents by company employees. On the Configuration settings page, select FileVault to expand the available settings: For Recovery key type, select Personal key. The user must enter their personal recovery key, and Intune then attempts to rotate the key to generate a new key. If you have an iMac Pro or another Mac with a T2 chip, data on your drive is already encrypted automatically, so FileVault . In fact, you probably wont even notice a difference in your devices performance after turning FileVault disk encryption on. Modifying this control will update this page automatically. How to View FileVault Progress When Encrypting a Mac Disk TechRepublic Premium content helps you solve your toughest IT issues and jump-start your career or next project. Advantages vs disadvantages with using FileVault, Downsides of encrypting disk with FileVault, Mac FileVault 2s full disk encryption can be bypassed in less than 40 minutes, Top 10 open-source security and operational risks of 2023, As a cybersecurity blade, ChatGPT can cut both ways, Cloud security, hampered by proliferation of tools, has a forest for trees problem, Electronic data retention policy (TechRepublic Premium), How to encrypt a USB flash drive with VeraCrypt, How to digitally sign a LibreOffice 6 document with GnuPG, How to restart a FileVault-protected Mac remotely, TechRepublic Premium editorial calendar: IT policies, checklists, toolkits and research for download, ChatGPT cheat sheet: Complete guide for 2023, The Best Payroll Software for Your Small Business in 2023, 1Password is looking to a password-free future. Configure the remaining FileVault settings to meet your business needs, and then select Next. FileVault disk encryption doesnt slow your Macs performance, even though it is always running in the background, so you have nothing to worry about.