Administering FileVault 2 with the Casper Suite

With the release of Mac OS X 10.7 come significant upgrades in data encryption. FileVault 2, the latest advancement in full disk encryption, is built into Mac OS X 10.7 and offers a secure, convenient, and cost-effective method for securing data on your Macs. It also allows administrators to recover data from encrypted drives without users' login credentials. The Casper Suite centralizes the packaging and distribution of settings that are required to activate FileVault encryption on client computers, while preserving the ability to recover the data from those systems.

This technical paper provides step-by-step instructions for configuring, activating, and reporting on FileVault2 with the Casper Suite. Be sure to review the information in the "Requirements" section of the document before using these instructions.

Key principles:

• Configuring FileVault 2
• Activating FileVault 2
• Reporting on FileVault 2
• Recovering data from drives encrypted using FileVault 2

Requirements

The following components are required to administer FileVault2 with the Casper Suite:

• Casper Suite version 8.3 or later running in your environment
• "Recovery HD" partition present
• Access to the JAMF Software Server (JSS)
• Casper Admin application
• Composer application
• (Optional) Casper Suite Resource Kit, available for download at: http://jamfsoftware.com/downloads/ResourceKit.dmg