Apple FileVault is not compatible with the Whole Disk Encryption drivers included in Symantec Encryption Desktop

Products

• Drive Encryption

Issue/Introduction

Apple FileVault cannot be used if the Whole Disk Encryption (WDE) drivers are installed. There are known incompatibilities with the WDE kernel extensions when using FileVault.

Warning: When installing Symantec Encryption Desktop the Whole Disk Encryption drivers are installed by default and need to be disabled if FileVault will be used after Encryption Desktop is installed.

Cause

Apple FileVault is not compatible with the Whole Disk Encryption kernel extensions.

There are multiple related issues when using FileVault while the Whole Disk driver is enabled.

Resolution

Symantec Encryption Desktop has built in functionality to detect if Core Storage Volumes are enabled (which are used with FileVault) on the OSX boot volume. In this case the Whole Disk Encryption drivers will not be installed to prevent compatibility issues.

Warning: There are no checks that would prevent you from installing FileVault after Symantec Encryption Desktop (including WDE drivers) is already installed. If you try to create a FileVault volume with installed WDE drivers the creation will fail or unexpected issues might occur.

• To install Symantec Encryption Desktop without WDE drivers, refer to TECH183789
  
• To re-enable WDE drivers if they were disabled during the install, refer to TECH202020
  
• If no disks are shown in Symantec Encryption Desktop when trying to encrypt with Drive Encryption while FileVault is present refer to TECH209294
• If your OSX system doesn't boot up anymore due to the incompatibility issue with Filevault and WDE refer to TECH173502
• For re-installing OSX and properly removing traces of previous Drive Encryption installations, refer to TECH212938
  
• If you are using a Symantec Encryption Desktop version oler than 10.3.0 MP1 and the operating system fails to boot after attaching a FileVault-encrypted external disk, refer to TECH185289

 

Applies To

Apple FileVault and Symantec Encryption Desktop with Whole Disk Encryption drivers enabled.