Home > FileVault 2, Mac administration, macOS > fdesetup authrestart no longer requires an immediate restart in macOS Sierra

fdesetup authrestart no longer requires an immediate restart in macOS Sierra

Apple made a change to the fdesetup authrestart command in macOS Sierra, where running fdesetup authrestart will no longer require the encrypted Mac in question to restart immediately.

The delayed restart option can be enabled by adding the -delayminutes verb to the fdesetup authrestart command and specifying one of the following:

  • Time in minutes = Delay the restart command for a set number of minutes
  • 0 = immediate restart
  • -1 = wait indefinitely for restart

Using the -1 option means that the user can restart at their convenience and their encrypted Mac will automatically bypass the FileVault 2 pre-boot login at the next reboot.

To show what this behavior looks like, please see the videos below:

fdesetup authrestart -delayminutes 0

fdesetup authrestart -delayminutes 0

Note: The video has been edited to artificially reduce the amount of time the restart process takes to run. Run time of the pre-edited video was 1 minute 30 seconds.

fdesetup authrestart -delayminutes 1

fdesetup authrestart -delayminutes 1

Note: The video has been edited to artificially reduce the amount of time the restart process takes to run. Run time of the pre-edited video was 2 minutes 18 seconds.

fdesetup authrestart -delayminutes -1

fdesetup authrestart -delayminutes -1

Note: The video has been edited to artificially reduce the amount of time the restart process takes to run. Run time of the pre-edited video was 1 minute 43 seconds.

  1. apfelpom
    September 22, 2016 at 11:26 pm

    Hi Rich, it seems that the last video was set as private, so we can not watch (at least in Germany). BTW: Thanks for so much insights, you’ve made my (admin)day once again 🙂

    • September 22, 2016 at 11:36 pm

      Thanks for the heads up! That should now be fixed.

  2. December 27, 2016 at 3:39 am

    Great article. I suppose to fully automate macOS Sierra upgrade, a FileVault 2 encrypted computer would have to prompt the user for their password, so the import file can have it ready for the restart command. Is it me or does the thought of having someone’s password in a plain text file (txt/xml) give you cold shivers?

  3. John Lightfoot
    March 31, 2017 at 4:34 pm

    In your article, the line immediately above each youtube video shows the wrong command. They’re missing the – before delayminutes.

    • March 31, 2017 at 7:13 pm

      Thanks, good catch. Now fixed.

  1. No trackbacks yet.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: