Archive

Archive for October 13, 2011

FileVault 2 encryption status check script

October 13, 2011 9 comments

As part of working on FileVault 2, I’ve been developing a script that can be run via various system management tools to report whether or not a particular Mac is encrypted with FileVault 2. Currently, here’s what the script is detecting and reporting:

Checks to see if the OS on the Mac is 10.7 or not.

If it is not, the following message is displayed without quotes: FileVault 2 Encryption Not Available For This Version Of Mac OS X

If the Mac is running 10.7, but not does not have any CoreStorage volumes, the following message is displayed without quotes: FileVault 2 Encryption Not Enabled

If the Mac is running 10.7 and has CoreStorage volumes, the script then checks to see if the machine is encrypted, encrypting, or decrypting.

If encrypted, the following message is displayed without quotes: FileVault 2 Encryption Complete

If encrypting, the following message is displayed without quotes: FileVault 2 Encryption Proceeding

How much has been encrypted of of the total amount of space is also displayed.

If the amount of encryption is for some reason not known, the following message is displayed without quotes: FileVault 2 Encryption Status Unknown. Please check.

If decrypting, the following message is displayed without quotes: FileVault 2 Decryption Proceeding

How much has been decrypted of of the total amount of space is also displayed

If fully decrypted, the following message is displayed without quotes: FileVault 2 Decryption Complete

The script is available here on my GitHub repository. I’ve also built a Casper-specific version for use as a Casper Extension Attribute.