Decryption key is not provided when enabling macOS 10.13 "High Sierra" drive encryption via Endpoint Protection Cloud policy

book

Article ID: 170294

calendar_today

Updated On:

Products

Endpoint Protection Cloud

Issue/Introduction

Decryption key is not provided when enabling macOS 10.13 "High Sierra" drive encryption via Symantec Endpoint Protection Cloud (SEPC) security policy. In older macOS versions (10.12 and older) the key is normally made visible on the device when encyption starts and can also be viewed in the SEPC management portal, but this is not the case with macOS 10.13.

Cause

The decryption key storage technology has changed with macOS 10.13 High Sierra and the SEPC product will need to be modified to accomodate it.

Resolution

This has been resolved in the current version of SEPC and FileVault encryption should work as expected.