Home > FileVault 2, Mac administration, Mac OS X > Using a login banner with FileVault 2

Using a login banner with FileVault 2

In a number of workplaces that require the use of encryption, there is often an accompanying requirement for a login banner that shows an Acceptable Use Policy, legal warning or other important information that the user must accept before logging in. While there isn’t the ability to set a login banner at FileVault 2’s pre-boot login screen at this point, you can leverage Lion’s built-in functionality to display a policy banner that must be accepted before the login process can complete. See below the jump for more details.

To set the policy banner, copy a PolicyBanner.txt, .rtf, or .rtfd file with the text to be displayed into /Library/Security/ and the policy banner is set. Now when a user logs in at the pre-boot login screen, they will be required to acknowledge the dialog before they can access their account.

For example, I’ve created this PolicyBanner.rtfd document for a fictional company and copied it to /Library/Security/.


Now that the policy banner has been set, restart and log in with your account at the pre-boot login screen.

Screen Shot 2011-08-01 at 8.24.03 PM

After putting in your password, but before your account’s desktop appears, you will be required to click Accept at the following window.

Screen Shot 2011-08-01 at 8.47.10 PM
  1. nichorey
    August 20, 2015 at 8:47 pm

    Have you ever run into an issue where a MacBook is connect to a non-Apple display and the Policy Banner doesn’t appear until the display is unplugged? This is happening for several users on different non-Apple displays with different video adapters. Any thoughts?

  1. No trackbacks yet.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: