We were recently alerted that some macOS devices are failing to enable FileVault during enrollment through Apple Setup Assistant. The setting is configured using the Force Enable in Setup Assistant key in the macOS settings catalog located under Full Disk Encryption > FileVault.

Screenshot of the FileVault settings in Settings Calalog in the Microsoft Intune admin center.

Workaround

If you’re experiencing an issue where the device doesn’t prompt to enable FileVault during Setup Assistant, it can potentially be mitigated by:

Configuring FileVault > Defer setting to be Enabled:
Screenshot of the ‘FileVault – Defer’ setting set as ‘Enabled’ in a Settings Catalog policy.
Instructing users to wait up to 30 minutes after arriving at the account creation screen:
Screenshot of the ‘Create a Computer Account’ screen on a macOS device.

We’ll continue to update this post as new information becomes available. If you have questions or comments for the Intune team, reply to this post or reach out on X @IntuneSuppTeam.

​Microsoft Tech Community – Latest Blogs –Read More