Requirements
- Mac Berkeley Desktop with the current or previous macOS supported version (such as macOS Ventura or Monterey)
- Mac Berkeley Desktop standard la-client management account with a Secure Token
- Computer has an Internet connection (a campus network connection is not required)
- Note: Automatic restart required after the encryption process has completed
Steps to use the Self Service Offer to enable FileVault Encryption
- Open the Mac Self Service portal: “/Applications/Self Service.app”
- Locate the Self Service Offer called “Berkeley Desktop FileVault Encryption for Mac” and click the “Encrypt” button. Note: You may receive a message asking if Jamf can control certain components on your Mac. This is normal, please click “OK” to allow and proceed
- The Self Service Offer will first check if your account has a Secure Token, which is required to enable FileVault. If you already have a Secure Token, then the Self Service Offer will automatically proceed to Step 4If you do not have a Secure Token, then the Self Service Offer will attempt to assign you one. You will be prompted to enter your account’s passphrase (i.e. CalNet passphrase)
If a Secure Token cannot be assigned to your account, then you will receive a message to contact your IT support provider for further assistance. The Berkeley Desktop FileVault Encryption process will stop at this point, and your Mac will not be encrypted until IT can assign your account a Secure Token. This is an example of one of the messages: - The encryption process runs in the background, so you will not notice any prompts while FileVault is being enabled. This process may take ~5 minutes depending on your computer and physical location.
- When the encryption process has completed, a message will appear to let you know that the Berkeley Desktop encryption was successful, and your computer will automatically restart in two minutes.
- Log in to your computer. You will receive two prompts to let you know that FileVault has been enabled, and it will encrypt your Mac’s system drive in the background. Click “OK” to continue. You may continue to use your computer as you normally would at this time.