Blog Post

Intune Customer Success
1 MIN READ

Resolved - Known issue: FileVault failing to enable on macOS devices during Setup Assistant

Intune_Support_Team's avatar
Intune_Support_Team
Icon for Microsoft rankMicrosoft
Jul 01, 2024

Updated 12/02/24: A fix to resolve this known issue was included in the November Intune service release (2411). Affected devices should not require any additional actions during deployment. Should anyone have any further questions or comments for the Intune team, please send us a message or reach out to us on X @IntuneSuppTeam. Thanks!

 

We were recently alerted that some macOS devices are failing to enable FileVault during enrollment through Apple Setup Assistant. The setting is configured using the Force Enable in Setup Assistant key in the macOS settings catalog located under Full Disk Encryption > FileVault.

 

Screenshot of the FileVault settings in Settings Calalog in the Microsoft Intune admin center.

 

Workaround

If you're experiencing an issue where the device doesn’t prompt to enable FileVault during Setup Assistant, it can potentially be mitigated by:

  • Configuring FileVault > Defer setting to be Enabled:
    Screenshot of the 'FileVault - Defer' setting set as 'Enabled' in a Settings Catalog policy.
  • Instructing users to wait up to 30 minutes after arriving at the account creation screen:
    Screenshot of the 'Create a Computer Account' screen on a macOS device.

We’ll continue to update this post as new information becomes available. If you have questions or comments for the Intune team, reply to this post or reach out on X @IntuneSuppTeam.

 

Post updates:

08/22/24: Post updated with the latest resolution information.

10/10/24: Post updated with the latest resolution information.

12/02/24: This known issue is now resolved!

Updated Dec 02, 2024
Version 7.0
Apple
macOS
  • Well_Connected_IT's avatar
    Well_Connected_IT
    Copper Contributor
    Sep 19, 2024

    Hi Intune_Support_Team ,

     

    Has any progress been made towards fixing this?

     

    Can I also suggest that the "Force Enable In Setup Assistant" key be added to the Endpoint Security > Disk Encryption Policy.

    Otherwise, we need to configure two separate policies.

     

    Hopefully a fix is not too far away.

     

    Thanks.

  • surajitP's avatar
    surajitP
    Copper Contributor
    Jul 02, 2024

    "Instructing users to wait up to 30 minutes after arriving at the account creation screen"!!!
    This defeats the whole purpose of automated device enrollment. Eagerly awaiting for a permeant solution.

  • DMangia96's avatar
    DMangia96
    Copper Contributor
    Oct 16, 2024

    Hi All,

    I would like to add my personal experience as an Intune Admin working with MacOS:

     

    The FileVault option is not being displayed during Setup Assistant even if no any FileVault Policy has been assigned to the target user, despite the FileVault step has been configured as "Show" from the ADE Enrollment propoerties.

     

    In short, with or without a FileVault policy assigned, Setup Assistant skips the FileVault step, despite it has been configured as "Show".

     

     

  • kittet's avatar
    kittet
    Copper Contributor
    Nov 19, 2024

    Intune_Support_Team
    Hello, I was told this would be released on the Nov 13th but all my tests are still failing. 

    When will this be fixed? Please provide the release date for the fix.

  • Anthony_Pinto's avatar
    Anthony_Pinto
    Copper Contributor
    Jul 05, 2024

    Other MDM's have similar issues, the general recommendation is to target the devices with the FileVault Configuration Profile and have FileVault enable as the user logs in for the first time rather than encrypting during setup assistant.