Video description
FileVault 2 is increasingly becoming the default encryption
solution for enterprises that support Macs running OS X. There is
not much documentation on this solution, however, and most of what
is available focuses on the consumer market. Here to guide the
enterprise professional, popular presenter Richard Trouton gives a
detailed, one-hour guide to FileVault 2. By the end of the video,
you'll know how to set up FileVault 2 for your own use, build and
deploy an institutional recovery key, and use the most
commonly-used functions of Apple's fdesetup command line management
tool. Rich Trouton has been a Macintosh system and server
administrator for over fifteen years and has supported Macs in a
number of different environments, including university, government,
medical research and advertising. His current position is providing
support for Howard Hughes Medical Institute’s Janelia Farm Research
Campus in Ashburn, Virginia.
Table of Contents
FileVault 1 vs FileVault 2
Welcome
Similar names, different beasts
FileVault 1 strengths and weaknesses
Back to the drawing board
FileVault 2 Basics
How FileVault 2 works
FileVault 2 and Recovery HD
Enabling FileVault 2 for personal use (demo)
Using the Personal Recovery Key to reset passwords
Institutional deployment
Creating an Institutional Recovery Key
Building an Institutional Recovery Key (demo)
Deploying an Institutional Recovery Key
Disaster recovery
Unlocking a FileVault 2 encrypted drive (demo)
FileVault 2 Under the Hood
Cryptographic keys and FileVault 2
fdesetup
Introduction to fdesetup
fdesetup enable
fdesetup disable
fdesetup add
fdesetup list
fdesetup remove
fdesetup changerecovery
fdesetup removerecovery
fdesetup sync
fdesetup authrestart
FileVault 2 Beyond the Basics
FileVault 2's guest user
Remote locking and wiping
Disabling FileVault 2's automated user login
In Conclusion
Limitations, FileVault and the Law, and Tips