Mac OS X disk encryption with Intune

[Peter Klapwijk]

Hi all,

Is there a possibility to encrypt the disk (FileVault) of an Mac OS X device by using Intune? I read something about Apple Configurator, to create a profile and deploy it with Intune. But I cannot find information on how to setup such a profile for disk encryption. Anybody have a good article about this? Or another good solution to encrypt a harddisk on a Mac?

Thanks!

Peter

[#2]

This look like somewhere to start https://www.johnkitzmiller.com/blog/how-i-deploy-filevault-2/

Some offical apple documentation http://training.apple.com/pdf/WP_FileVault2.pdf

Haven't done it myself so no experience.

[#3]

Thanks! But this guy is using Casper, I`m looking for a solution based on intune (if possible).

[#4 · Accepted solution]

@Peter Klapwijk This feature is currently in development and is expected to be released this year.

https://microsoftintune.uservoice.com/forums/291681-ideas/suggestions/32943412-enable-filevault-and-...

https://www.microsoft.com/en-au/microsoft-365/roadmap?filters=&searchterms=51243

Till such time you can use the mac device compliance policy and set the "Encryption of data storage on a device to require". This will prevent users from storing company data on their device unless it is encrypted.

[#5]

@Pramiti Bhatnagar Ok! Better late than never 😉

[#6]

Its released. Check this out 🙂

https://docs.microsoft.com/en-us/intune/whats-new#manage-filevault-for-macos---

https://docs.microsoft.com/en-us/intune/encrypt-devices

[#7]

@Pramiti Bhatnagar @Peter Klapwijk 

and my initial tests with the policy were successful 👍

[#8]

@Oliver Kieselbach do you know what will happen if I already have custom profile deployed to enforce Filevault? 

[#9]

Hey @Alexander Vanyurikhin,

honestly I don't know. I guess it could potentially conflict but don't know. I think you need to do some tests in a lab environment...

✌ best,
Oliver