🌟To do this, you must first ensure that your device has not been encrypted prior to Fleetsmith by another source, or that FileVault 2 hasn’t been manually turned on via "System Preferences" on the device. (If this is the case, don’t fret! You can still correct this by following the steps in this article: What if my device was encrypted prior to Fleetsmith, or FileVault 2 was manually turned on?).
To manage encryption through Fleetsmith:
- In the “Apps & Settings” page, click on “FileVault 2.”
- Under the “Add to profile…” dropdown menu, select the profile that is assigned to the devices you would like encrypted. This could be the Global profile or any existing profile. (Note: if there are devices in your fleet that you do not want encrypted, do not use the Global profile).
- The profile you selected will appear on the right side of the page under “Managed profiles.”
- At this time, FileVault 2 encryption is currently enabled and will take effect on each device after they check in (please note that this can take up to 20 minutes, though it is usually faster). Your employees will see the following notification in their Fleetsmith agent:
🌟Note: you can configure additional options, such as enforced FileVault 2 updates, by clicking on “Configure” next to the profile name on the FileVault 2 page.