Contents

FDEFileVaultOptions

The payload that configures FileVault options.

Declaration

object FDEFileVaultOptions

Properties

NameTypeDescription
DestroyFVKeyOnStandbyboolean

If true, the system won’t store th FileVault key across restarts.

dontAllowFDEDisableboolean

If true, the system won’t disable FileVault.

dontAllowFDEEnableboolean

If true, the system won’t enable FileVault.

Discussion

Specify com.apple.MCX as the payload type.

Profile availability

Device channel

macOS

User channel

NA

Allow manual install

macOS

Requires supervision

NA

Requires user-approved MDM

NA

Allowed in user enrollment

NA

Allow multiple payloads

NA

Profile example

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>PayloadContent</key>
    <array>
        <dict>
            <key>dontAllowFDEDisable</key>
            <true/>
            <key>PayloadIdentifier</key>
            <string>com.example.myfdefvoptionspayload</string>
            <key>PayloadType</key>
            <string>com.apple.MCX</string>
            <key>PayloadUUID</key>
            <string>0a8f4102-0fbf-4d8c-b1e1-3d916f89d927</string>
            <key>PayloadVersion</key>
            <integer>1</integer>
        </dict>
    </array>
    <key>PayloadDisplayName</key>
    <string>FileVault 2 Options</string>
    <key>PayloadIdentifier</key>
    <string>com.example.myprofile</string>
    <key>PayloadType</key>
    <string>Configuration</string>
    <key>PayloadUUID</key>
    <string>92821df0-7c04-4366-b805-eb51ed87541b</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
</dict>
</plist>

See Also

Full Disk Encryption